1 個回答
- 最新
- 最多得票
- 最多評論
3
Hi Pedro, You will need to update the bucket policy to grant access to your third-party application. As you pointed out, AWS Control Tower Guardrail prevents updates to bucket policies, so you will need to log into the Organization Management account first, then use the Switch Role capability from the drop down menu under your login in the upper right, to assume the AWSControlTowerExecution role in the Logging account. Using that role, you will be able to update the bucket policy in the Logging account. If you prefer doing this in code, you can also accomplish this using the AssumeRole cli command.
已回答 2 年前
相關內容
- AWS 官方已更新 3 年前
- AWS 官方已更新 2 年前
- AWS 官方已更新 2 年前
- AWS 官方已更新 2 年前
Were you able to figure this out? I just tried this using the documentation at https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-policy-generation.html?icmpid=docs_iam_console#access-analyzer-policy-generation-cross-account with no luck.