Question
Company A has an AWS account that is named Account A. Company A recently acquired Company B, which has an AWS account that is named Account B. Company B stores its files in an Amazon S3 bucket. The administrators need to give a user from Account A full access to the S3 bucket in Account B.
After the administrators adjust the IAM permissions for the user in Account A to access the S3 bucket in Account B, the user still cannot access any files in the S3 bucket.
Which solution will resolve this issue?
- A. In Account B, create a bucket ACL to allow the user from Account A to access the S3 bucket in Account B.
- B. In Account B, create an object ACL to allow the user from Account A to access all the objects in the S3 bucket in Account B.
- C. In Account B, create a bucket policy to allow the user from Account A to access the S3 bucket in Account B. Correct
- D. In Account B, create a user policy to allow the user from Account A to access the S3 bucket in Account B.
Explanation
According to AWS documentation, cross-account access to an Amazon S3 bucket requires setting up a bucket policy that explicitly grants permissions to users or roles from another account. Option C correctly identifies creating a bucket policy as the appropriate method for granting the user in Account A full access to the S3 bucket in Account B.
