By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Describe RDS Snapshot from a different account

0

Is it possible to describe and remove snapshots within account B using a Lambda function from account A? If so, what IAM permissions are required on what account?

Topics
ServerlessComputeSecurity, Identity, & Compliance
Tags
AWS LambdaIAM Policies
Language
English
Aaron
asked a month ago200 views
1 Answer
0
Accepted Answer

Best practice would be for your lambda function to assume a role in account B from Account A. Make sure the Role in account B has the correct IAM permissions that allows it to perform actions on snapshots.

Account A lambda execution role will need STS Assume permissions against role in Account B.

profile picture
EXPERT
Gary Mclean
answered a month ago
AWS
SUPPORT ENGINEER
Yokesh NK
reviewed a month ago
  • Aaron
    a month ago

    Thanks Gary, much appreciated. I got it working.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content