Solution for Transferring huge data from one S3 to another S3 in a different AWS account, securely and without VPC Peering.

Question

Hi Team, I'm looking for a solution to transfer huge data from one S3 to other S3 bucket, in different AWS account i.e. cross accounts, having NO VPC Peering connection allowed. Solution should be cost highly secured and cost effective. They are two different enterprise units and no connections like VPC-Peering allowed between their networks. I thought of DataSync but not sure how secure we can make it. Pls suggest the best way to design it.
Thanks

Accepted Answer

Please take a look at [Amazon S3 Batch Replication](https://aws.amazon.com/blogs/aws/new-replicate-existing-objects-with-amazon-s3-batch-replication/).

Answer

Please refer following article.

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/copy-data-from-an-s3-bucket-in-one-account-and-region-to-another-account-and-region.html

Here are additional options.

https://www.ais.com/methods-to-transfer-data-between-amazon-aws-s3-buckets/

Hope this helps.

Answer

Not answering the question but a clarification:

VPC peering is not relevant in this situation. S3 doesn't "live" within a VPC so to access S3 buckets in different accounts you don't need to access a VPC in a different account.

If you wish to use S3 in a VPC without an Internet Gateway then you should most likely use a [Gateway Endpoint](https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html) - that endpoint will allow you to access S3 buckets in different accounts in the region where your VPC is. You can restrict access using an endpoint policy.

Solution for Transferring huge data from one S3 to another S3 in a different AWS account, securely and without VPC Peering.

Relevant content