Multi-account CloudTrail S3 object ownership
When AWS CloudTrail is sent to an Amazon S3 bucket in a different account, ownership of the object in S3 is kept as the sender account. Is there a way to change the ownership to account where s3 is located?
- 新しい順
- 投票が多い順
- コメントが多い順
By default, an S3 object is owned by the identity that uploaded the object. Every bucket and object in Amazon S3 has an owner, the user that created the bucket or object. The owner of a bucket or object cannot be changed. However, if the object is overwritten by another user (deleted and rewritten), the new object will have a new owner.
However, as of October 2nd, 2020, you can now change the object owner on upload. See here for details:
And:
https://docs.aws.amazon.com/AmazonS3/latest/dev/about-object-ownership.html
But the default behavior of S3 remains unchanged.
