Cross account connection between two AWS accounts on same zone

Question

I would like to create cross account connection between two AWS accounts. I have S3 bucket location and KMS key for target account S3 bucket. How do I create cross account connection between both of these?

Thanks!

Answer

You don’t technically create a cross account connection.

You have to grant access to the S3 bucket and to the KMS key in the target account using policies.

Please find the 2 pages you will require to grant access

https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs-managing-access-example2.html

https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-modifying-external-accounts.html#

Of course the user/role in source account will need permissions to access s3 resources and Kms functions set in source account also.

Cross account connection between two AWS accounts on same zone

相關內容