Access to one of the member account in control tower from another client external AWS account

1

I have a requirement. I have created a Landing Zone using Control Tower. One of my external AWS account needs access to the Logging member account and access resources inside the Logging account, How can this be achieved

1 Antwort
1

If you don't want the account to be part of the organization, then you'll need to grant access. To grant access to an external account, you can treat it like a third party account. This will involve granting a trust as well as permissions. For extra security consider adding an external id which is like a key or password.

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html

Hope this helps, if it does please accept this answer.

profile picture
beantwortet vor 10 Monaten
profile picture
EXPERTE
überprüft vor 10 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen