Multi-account CloudTrail S3 object ownership

0

When AWS CloudTrail is sent to an Amazon S3 bucket in a different account, ownership of the object in S3 is kept as the sender account. Is there a way to change the ownership to account where s3 is located?

AWS
asked 4 years ago405 views
1 Answer
0
Accepted Answer

By default, an S3 object is owned by the identity that uploaded the object. Every bucket and object in Amazon S3 has an owner, the user that created the bucket or object. The owner of a bucket or object cannot be changed. However, if the object is overwritten by another user (deleted and rewritten), the new object will have a new owner.

However, as of October 2nd, 2020, you can now change the object owner on upload. See here for details:

https://aws.amazon.com/about-aws/whats-new/2020/10/amazon-s3-object-ownership-enables-bucket-owners-to-automatically-assume-ownership-of-objects-uploaded-to-their-buckets/

And:

https://docs.aws.amazon.com/AmazonS3/latest/dev/about-object-ownership.html

But the default behavior of S3 remains unchanged.

Bruno_M
answered 4 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions