Sharing S3 Bucket between Accounts for CloudFront

Question

I have two AWS accounts. Each account has an S3 bucket and CloudFront which exposes the contents of the S3 bucket.

I would like to get rid of a CORS issue. For that I I need to serve all content using one CloudFront.

How I can grant permissions to the S3 bucket from account2 to CloudFront in account1?

Are the buckets public? How are you currently granting access to CloudFront? (eg Origin Access Identity?) — John Rotenstein
– John Rotenstein, Commented Jun 10, 2019 at 23:55

James Dean · Accepted Answer · 2019-06-11 15:59:26Z

This is possible if the bucket is publicly accessible , the bucket won't come in the drop down when you're creating origin but you can use the name as bucket.s3.region.amazonaws.com.

It is also possible using origin access identity. Use first your own bucket to create the bucket policy automatically by CloudFront, you should be able to see IAM identity in CloudTrail, you can copy the same policy on the other account S3 bucket and OAI should work.

See: Restricting Access to Amazon S3 Content by Using an Origin Access Identity - Amazon CloudFront

Collectives™ on Stack Overflow

Sharing S3 Bucket between Accounts for CloudFront

1 Answer 1

1 Comment

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Related