#s3 #iam #awsservices #aws #awstraining
Hi viewers, please follow the process to work on the same.
please use below link to join the Whatsapp group
chat.whatsapp.com/LqCC6hb04IY...
---------------------
#source bucket policy
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "DelegateS3Access",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::target-accountuserid/role"
},
"Action": [
"s3:GetObject",
"s3:PutObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::source-bucket-arn/*",
"arn:aws:s3:::source-bucket-arn"
]
}
]
}
--------------
####iam policy in destination account to copy s3 objects from source
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:ListBucket",
"s3:GetObject"
],
"Resource": [
"arn:aws:s3:::source-bucket",
"arn:aws:s3:::source-bucket/*"
]
},
{
"Effect": "Allow",
"Action": [
"s3:ListBucket",
"s3:PutObject",
"s3:PutObjectAcl"
],
"Resource": [
"arn:aws:s3:::destination-bucket",
"arn:aws:s3:::destination-bucket/*"
]
}
]
}