...
VXG will need administrator-level access to the customer’s AWS console to set up all necessary components of Cloud VMS. This access can be temporary for deployment only, then it can be switched to read-only access.
To keep your existing AWS infrastructure securely isolated, we recommend creating a separate AWS account and making it a part of your AWS Organization for centralized management and billing consolidation. Please follow the official AWS guide to add a new AWS account under your Organization - https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html
If you do not have an AWS Organization created yet - please follow this guide - https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_create.html
Sometimes, there is a need to limit the access of this administrator account to certain resources running in AWS, in this case, please follow this guide - https://docs.aws.amazon.com/medialive/latest/ug/setting-up-restricted-admin.html
...