Set AWS cloudtrail input from another aws account bucket

Graylog Central (peer support)
1

Hi,

We follow this document to set sharing CloudTrail Log Files Between AWS Accounts.
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-sharing-logs.html
We put B AWS account’s cloudtrail logs to A AWS account bucket.
And we let cloudtrail iam user can access A AWS account bucket.

We set a assume role to input try to get log from A AWS account bucket,but a SQS error occur.

image
image.png1321×68 4.88 KB

But it occur can’t get log from bucket if we don’t set assume role to input.

image
image.png1315×51 8.38 KB

Anyone can help us?

Thanks.

2

Continuing the discussion from Set AWS cloudtrail input from another aws account bucket:

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.