s3 bucket owners

0

My dev ceated the buckets under my account on S3. He has left but remains the bucket(s) owner. Can I change that to make me the bucket(s) owner? I pay for the account.

Dan
asked 8 months ago146 views
2 Answers
1

Bucket ownership is non-transferable.

Please refer Bucket Restrictions Documentation.

profile pictureAWS
EXPERT
answered 8 months ago
profile picture
EXPERT
reviewed 8 months ago
  • From AWS CLI, run: aws s3api get-bucket-acl --bucket <bucket> --profile <cli_profile_name>

    You'll get the Display name of old developer.

    If old developer IAM user is deleted and all the associated IAM access/secret keys have been disabled/deleted, there are no temp credentials associated with that user, he/she won't be able to access the bucket.

    If that user used a federated IAM role, then I assume with his departure, his federated access would also have been revoked, so he/she can't access the bucket.

    If this user still exists and supposed to exist in the account but you don't want this user to access the bucket then you can add bucket policy to explicit deny that user.

    Comment here if you have additional questions, happy to help.

  • Do you have any additional questions?

0

How then can I make it so old dev can't access the buckets?

Dan
answered 8 months ago
  • From AWS CLI, run: aws s3api get-bucket-acl --bucket <bucket> --profile <cli_profile_name>

    You'll get the Display name of old developer.

    If old developer IAM user is deleted and all the associated IAM access/secret keys have been disabled/deleted, there are no temp credentials associated with that user, he/she won't be able to access the bucket.

    If that user used a federated IAM role, then I assume with his departure, his federated access would also have been revoked, so he/she can't access the bucket.

    If this user still exists and supposed to exist in the account but you don't want this user to access the bucket then you can add bucket policy to explicit deny that user.

    Comment here if you have additional questions, happy to help.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions