Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update CrossAccount.md #3752

Merged
merged 8 commits into from
Dec 12, 2024
Merged

Update CrossAccount.md #3752

Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
028d226
Update CrossAccount.md
Oct 3, 2023
197ffcf
Update docs/CrossAccount.md
kevinemoore Dec 24, 2023
5c2c75d
Update docs/CrossAccount.md
kevinemoore Dec 24, 2023
dd49b0a
Update docs/CrossAccount.md
kevinemoore Dec 24, 2023
f641d2f
Merge branch 'master' into docs-cross-account-sns
kevinemoore Dec 24, 2023
ce36358
Merge branch 'master' into docs-cross-account-sns
sir-sigurd Dec 11, 2024
4bf3d60
Apply suggestions from code review
sir-sigurd Dec 11, 2024
a2ea137
Update docs/CrossAccount.md
sir-sigurd Dec 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 25 additions & 0 deletions docs/CrossAccount.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,31 @@ following to buckets in your *DataAccount*.
}
```

## Notifications
sir-sigurd marked this conversation as resolved.
Show resolved Hide resolved

In order for *ControlAccount* to use an existing and
[correctly configured SNS topic](EventBridge.md#the-workarounds)
for a single bucket in *DataAccount*, add a statement similar to the following
QuiltSimon marked this conversation as resolved.
Show resolved Hide resolved
to the topic resource policy:

```json
{
"Sid": "AWSConfigSNSPolicy",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::CONTROL-ACCOUNT:root"
},
"Action": [
"sns:GetTopicAttributes",
"sns:Subscribe"
],
"Resource": "SNS_TOPIC_ARN"
}
```

You can now set the SNS topic in the [Catalog Admin Panel](catalog/Admin.md) in bucket
sir-sigurd marked this conversation as resolved.
Show resolved Hide resolved
properties under "Indexing and notifications".

## CloudTrail

For security, auditing, and user-facing analytics, it is recommended that all
Expand Down
Loading