S3 Target Object Ownership

simonB2020 — Sat, 25 Jun 2022 09:26:11 GMT

I am running replicate on an AWS EC2 instance in account (a).

My target is an S3 bucket on another AWS account (b).

Whilst the data file gets written to account b successfully, nobody in account b can access the file because it is sill owned by account a.

Under other circumstances, we would leverage bucket-ownership controls & policies to transfer ownership to account b.
However, Replicate complains when such policies are implemented with 'Access Denied'
I also realise that if ownership was transferred, then Replicate would lose the ability to overwrite during a full load for example.

I'm really not sure what the solution is here, so looking for experience and/or wisdom from others.

How to I write to a different account's S3, and allow both Replicate to function as required, yet also allow the target account owners to read the data ?

Thanks for any guidance.

Re: S3 Target Object Ownership

SwathiPulagam — Sun, 26 Jun 2022 14:16:03 GMT

@simonB2020 ,

Here are the articles you can use to provide cross-account access to objects in Amazon S3 buckets.

https://aws.amazon.com/premiumsupport/knowledge-center/cross-account-access-s3/

https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs-managing-access-example2.html

If you have further questions then please create a case for AWS support.

Thanks,

Swathi

topic S3 Target Object Ownership in Qlik Replicate

S3 Target Object Ownership

Re: S3 Target Object Ownership