Amazon S3 Sync - cross aws account

Use Case : Cross Account S3 Bucket Sync

Scenario : You will be in a situation where

• You don't have access to source AWS Account
• You have access only destination AWS Account
• You wanted to sync/copy files from source AWS Account to destination AWS Account

---

AWS Account details

1.Source_AWS_Account : 11112222
S3 Bucket Name : Source-Bucket-Name
KMS key attached to S3 Bucket
- Add the destination ec2 instance profile role in kms policy

2.Destination_AWS_Account : 22223333
Destination S3 Bucket Name : Destination-Bucket-Name

---

1.Attach the policy to Source S3 bucket

{
        "Sid": "CrossAccountSyncAccess",
        "Effect": "Allow",
        "Principal": {"AWS": "Destination_AWS_Account"},
        "Action" : [ "s3:ListBucket","s3:GetObject"],
        "Resource" :[
            "arn:aws:s3:::Source-Bucket-Name/*",
            "arn:aws:s3:::Source-Bucket-Name"
        ]
}

2.Attach the below iam policy for destination account - EC2 Instance profile role

{
        "Sid": "CrossAccountSyncAccess_Source",
        "Effect": "Allow",
        "Action" : [ "s3:ListBucket","s3:GetObject"],
        "Resource" :[
            "arn:aws:s3:::Source-Bucket-Name/*",
            "arn:aws:s3:::Source-Bucket-Name"
        ]
},
{
        "Sid": "CrossAccountSyncAccess_Destination",
        "Effect": "Allow",
        "Action" : [ "s3:ListBucket","s3:PutObject","s3:PutObjectAcl"],
        "Resource" :[
            "arn:aws:s3:::Destination-Bucket-Name/*",
            "arn:aws:s3:::Destination-Bucket-Name"
        ]
}

3.Run the below command

aws s3 sync s3://Source-BucketName  s3://Destination-BucketName

Conclusion : Process for S3 Sync cross aws accounts.
💬 If you enjoyed reading this blog post and found it informative, please take a moment to share your thoughts by leaving a review and liking it 😀 and follow me in dev.to , linkedin