Answers: <p>No.  The account that uploads an object into a bucket owns the object.  All the bucket owner account can do, unless granted permission by the object owner account, is delete the object.</p>
  
Answers: CC BY-SA 3.0
Answers: 2017-11-29T23:05:21.867Z
Answers: 2017-11-29T23:05:21.867Z
Answers: Michael - sqlbot
Body: <p>I have two AWS accounts: A and B (viewable from <a href="https://console.aws.amazon.com/organizations" rel="nofollow noreferrer">https://console.aws.amazon.com/organizations</a>). I have given an S3 bucket in account A a policy that allows account B to do everything in that bucket. When I have an EC2 instance on account B upload a file to that bucket, however, account A cannot access it because the owner is account B.</p>
  
  <p>Is there a way of resolving this without having account B specify an ACL that includes account A for every upload?</p>
  
Tags: <amazon-web-services><amazon-s3>
Title: AWS S3 ACLs across accounts
UserDisplayName: tau
ThreadText: # AWS S3 ACLs across accounts
  
  (Asked by: username_0 on 2017-11-29)
  
  I have two AWS accounts: A and B (viewable from <https://console.aws.amazon.com/organizations>). I have given an S3 bucket in account A a policy that allows account B to do everything in that bucket. When I have an EC2 instance on account B upload a file to that bucket, however, account A cannot access it because the owner is account B.
  
  Is there a way of resolving this without having account B specify an ACL that includes account A for every upload?
  
  **Tags:** amazon-web-services, amazon-s3
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2017-11-29. Score: 3
  
  No. The account that uploads an object into a bucket owns the object. All the bucket owner account can do, unless granted permission by the object owner account, is delete the object.
  
  
  ---
  
  