Skip to content

Ongoing service disruptions

For the most recent update on ongoing service disruptions affecting the AWS Middle East (UAE) Region (ME-CENTRAL-1), refer to the AWS Health Dashboard. For information on AWS Service migration, see How do I migrate my services to another region?

S3 prefix-selective cross-account permissions

0

Hi Experts I need to create selective permissions set on a single S3 bucket for different AWS accounts (either role or user) on a per prefix. example for the structure in the S3 bucket: my_s3_bucket/account1 my_s3_bucket/account2

I want to enable account1\2 programmatic access to put\get\delete objects on their corresponding prefixes without seeing\listing any other account`s prefix Is this a support pattern? If yes - how should it be implemented.

Thanks

Topics: Storage Security, Identity, & Compliance
Tags: AWS Identity and Access Management IAM Policies Amazon Simple Storage Service
Language: English

asked 3 years ago585 views

1 Answer

Newest
Most votes
Most comments

Are these answers helpful? Upvote the correct answer to help the community benefit from your knowledge.

0

Hi BoazG,

check out this blog from aws in wich it is configured with iam-users. But it should be the same procedure with external accounts.

Also you should configure it as a bucket resource policy.

https://aws.amazon.com/de/premiumsupport/knowledge-center/iam-s3-user-specific-folder/

rePost-User-6376828

answered 3 years ago

Relevant content

Allowing permission to Generate a policy based on CloudTrail events where the selected Trail logs events in an S3 bucket in another account
Accepted Answer
rePost-user-2700970
asked 4 years ago
Create IAM User that can view a single S3 bucket
Paola
asked a year ago
How to create separate Glue Catalog table on single S3 bucket with various different types of files
Gurpreet Singh Johar
asked 3 years ago
does s3 bucket need to have a sagemaker prefix for use with with jupyterlab
Accepted Answer
manoj
asked 2 years ago
How can I use Data Pipeline to run a one-time copy or automate a scheduled synchronization of my Amazon S3 buckets?
AWS OFFICIALUpdated 5 years ago
Why don't my Amazon S3 objects replicate when I set up replication between my buckets?
AWS OFFICIALUpdated 7 months ago
Why can't I access a specific folder or file in my Amazon S3 bucket?
AWS OFFICIALUpdated 3 years ago
How can I set up cross-account replication across my Amazon S3 buckets with Object Lock?
AWS OFFICIALUpdated 8 months ago
Cross account IAM permission set-up for running a Redshift COPY Command from Amazon S3 bucket in one AWS account to Amazon Redshift in another AWS account.
EXPERT
Washim Nawaz
published a year ago
AWS Control Tower Log Archive Bucket Replication: A Secure Alternative to Policy Modifications
EXPERT
Matt Barbieri
published 3 months ago