Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Want to see what's currently in public preview? We've pulled it all together in one place. Check it out here
cancel
Showing results for 
Search instead for 
Did you mean: 
simonB2020
Creator
Creator

S3 Target Object Ownership

I am running replicate on an AWS EC2 instance in account (a).

My target is an S3 bucket on another AWS account (b).

Whilst the data file gets written to account b successfully,  nobody in account b can access the file because it is sill owned by account a.

Under other circumstances, we would leverage bucket-ownership controls & policies to transfer ownership to account b.
However, Replicate complains when such policies are implemented with 'Access Denied'
I also realise that if ownership was transferred, then Replicate would lose the ability to overwrite during a full load for example.

I'm really not sure what the solution is here, so looking for experience and/or wisdom from others.

How to I write to a different account's S3, and allow both Replicate to function as required, yet also allow the target account owners to read the data ?

Thanks for any guidance.

Labels (2)
1 Solution

Accepted Solutions
SwathiPulagam
Support
Support

@simonB2020 ,

     Here are the articles you can use to provide cross-account access to objects in Amazon S3 buckets.

https://aws.amazon.com/premiumsupport/knowledge-center/cross-account-access-s3/

https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs-managing-access-example2....

  If you have further questions then please create a case for AWS support. 

 

Thanks,

Swathi

View solution in original post

1 Reply
SwathiPulagam
Support
Support

@simonB2020 ,

     Here are the articles you can use to provide cross-account access to objects in Amazon S3 buckets.

https://aws.amazon.com/premiumsupport/knowledge-center/cross-account-access-s3/

https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs-managing-access-example2....

  If you have further questions then please create a case for AWS support. 

 

Thanks,

Swathi