使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post

Describe RDS Snapshot from a different account

0

Is it possible to describe and remove snapshots within account B using a Lambda function from account A? If so, what IAM permissions are required on what account?

主題
無伺服器運算安全性、身分識別與合規
標籤
AWS LambdaIAM 政策
語言
English
Aaron
已提問 2 個月前檢視次數 205 次
1 個回答
0
已接受的答案

Best practice would be for your lambda function to assume a role in account B from Account A. Make sure the Role in account B has the correct IAM permissions that allows it to perform actions on snapshots.

Account A lambda execution role will need STS Assume permissions against role in Account B.

profile picture
專家
Gary Mclean
已回答 2 個月前
AWS
支援工程師
Yokesh NK
已審閱 2 個月前
  • Aaron
    2 個月前

    Thanks Gary, much appreciated. I got it working.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

回答問題指南

相關內容