1回答
- 新しい順
- 投票が多い順
- コメントが多い順
2
You can do that by delegate access across AWS accounts using IAM roles. Use AWS Mgmt Console to establish trust between the Mgmt and Vendor account. Create a IAM role named e.g. vendorARole. When you create the role, you define the Vendor account as a trusted entity and specify a permission policy that allows trusted users to access only one of the EC2 instance via tagging.
You can see a similar steps for sharing of S3 bucket across account at:
https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html
回答済み 2年前
関連するコンテンツ
- AWS公式更新しました 2年前