To grant access to s3 in account A from ec2

Question

DevOps

D

To grant access to s3 in account A from ec2

in account B with attached role in account B. I need just to adjust S3 policy with ec2 role arn and actions?

0

30.07.2024

8 ответов

12 просмотров

D Автор вопроса

Raptor Blue Bear
Bucket policy will need to allow the foreign princ...

‘’’json { "Version": "2012-10-17", "Statement": [ { "Action": [ "s3:GetObject", "s3:ListBucket" ], "Effect": "Allow", "Resource": [ "arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*" ], "Principal": { "AWS": [ "arn:aws:iam::ACCOUNT-B:role/my-ec2-role" ] } } ] } ‘’’

0

1 месяц назад

D Автор вопроса

D
‘’’json { "Version": "2012-10-17", "Statem...

I’ll try with this

0

1 месяц назад

Raptor Blue Bear

D
I’ll try with this

Won't work

0

1 месяц назад

D Автор вопроса

Raptor Blue Bear
Won't work

Why

0

1 месяц назад

D Автор вопроса

Raptor Blue Bear
Won't work

I can’t change role to ec2 instance too

0

1 месяц назад

D Автор вопроса

Raptor Blue Bear
Won't work

How can I achieve it without changing the ec2 role

0

1 месяц назад

D Автор вопроса

I'm uploading a object from Account B to Account A, but when I try read the object it reject any action. Account A has S3 with server side KMS

0

1 месяц назад

Raptor Blue Bear · Accepted Answer

Raptor Blue Bear

Bucket policy will need to allow the foreign principal and identity policy in account b will need to allow access. Proving you've got no SCPs or permission boundaries preventing it

0

1 месяц назад

Похожие чаты

To grant access to s3 in account A from ec2

8 ответов

Похожие вопросы