Summary
You can grant users in another AWS account (Account B) granular cross-account access to objects owned by your account (Account A) by creating an IAM role with permission to access objects and granting another AWS account permission to assume the role temporarily.
1
This allows the bucket owner to control access to objects in the bucket and manage access to them using policies.
2
3
According to
See more results on Neeva
Summaries from the best pages on the web
Summary
In Amazon S3, you can grant users in another AWS account (Account B) granular cross-account access to objects owned by your account (Account A).
Depending on the type of access that you want to provide, use one of the following solutions to grant cross-account access to objects:
If the requester is an IAM principal
Provide cross-account access to objects in Amazon S3 objects
amazon.com
Summary
This example scenario demonstrates how to grant cross-account permissions to objects that the bucket owner does not own. This can be done by creating an Amazon Identity and Access Management (IAM) role with permission to access objects, and granting another Amazon Web Services account permission to assume the role temporarily enabling it to access objects in the bucket. This allows the bucket owner to control access to objects in the bucket and manage access to them using policies.
Example 4: Bucket owner granting cross-account permission to objects it does not own - Amazon Simple Storage Service
amazonaws.cn
Ensure Amazon S3 buckets do not allow unknown cross account access via bucket policies. Knowledge Base Amazon Web Services Amazon S3 S3 Cross Account Access
S3 Cross Account Access | Trend Micro
cloudconformity.com
