Transfer data cross account from S3 to S3 using DataSync

Question

Hi AWS,

I am facing issue while transferring data from Account A S3 bucket to Account B S3 bucket as the person who owns the Account B S3 bucket is getting this error **Cross-account pass role is not allowed**. Are we missing any IAM permissions either from our end or his end which is giving such error.

Please guide.

Answer

The source bucket policy must allow IAM users/roles in the destination account to access the bucket.

And the destination bucket must be created according to the instructions in https://docs.aws.amazon.com/datasync/latest/userguide/create-s3-location.html

You can't use the cross-account pass role to access the cross-account S3 location https://repost.aws/knowledge-center/datasync-transfer-cross-account-s3

Answer

Hi, the required bucket policy, IAM role and configuration is outlined in this AWS DataSync tutorial that walks through configuring cross account transfers between S3 locations.
https://docs.aws.amazon.com/datasync/latest/userguide/tutorial_s3-s3-cross-account-transfer.html

Transfer data cross account from S3 to S3 using DataSync

Relevant content