Update CrossAccount.md (#3752)

Co-authored-by: Kevin Moore <[email protected]> Co-authored-by: Aneesh Karve <[email protected]> Co-authored-by: Sergey Fedoseev <[email protected]>
quiltdata · Dec 12, 2024 · 6bb4291 · 6bb4291
1 parent cda3d76
commit 6bb4291
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/docs/CrossAccount.md b/docs/CrossAccount.md
@@ -58,6 +58,31 @@ following to buckets in your *DataAccount*.
 }
 ```
 
+## Notifications
+
+In order for *ControlAccount* to use an existing and
+[correctly configured SNS topic](EventBridge.md#the-workarounds)
+for a single bucket in *DataAccount*, add a statement similar to the following
+to the topic resource policy:
+
+```json
+{
+      "Sid": "AWSConfigSNSPolicy",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::CONTROL-ACCOUNT:root"
+      },
+      "Action": [
+        "sns:GetTopicAttributes",
+        "sns:Subscribe"
+      ],
+      "Resource": "SNS_TOPIC_ARN"
+}
+```
+
+You can now set the SNS topic in the [Catalog Admin Panel](catalog/Admin.md) in bucket
+properties under "Indexing and notifications".
+
 ## CloudTrail
 
 For security, auditing, and user-facing analytics, it is recommended that all