Upload Data

by
Uncategorized

Using the CLI for AWS:

To be sure that a destination account owns an S3 object copied from your account, grant the destination account (Yuva AI’s) the permissions to perform the cross-account copy. Follow these steps to configure cross-account permissions to copy objects from a source bucket in your account to a destination bucket in Yuva AI’s:

1.    Attach a bucket policy to the source bucket in your account.

Important: For the value of Principal, replace arn:aws:iam::222222222222:user/Jane with the ARN of the IAM identity for your bucket. This can be found in your project dashboard. Also replace the “arn:aws:s3:::awsexamplesourcebucket” with the ARN of your source bucket.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DelegateS3Access",
            "Effect": "Allow",
            "Principal": {"AWS": "arn:aws:iam::222222222222:user/Jane"},
            "Action": ["s3:ListBucket","s3:GetObject"],
            "Resource": [
                "arn:aws:s3:::awsexamplesourcebucket/*",
                "arn:aws:s3:::awsexamplesourcebucket"
            ]
        }
    ]
}

Add a Comment

Your email address will not be published. Required fields are marked *