# Set AWS cloudtrail input from another aws account bucket

**URL:** <https://community.graylog.org/t/set-aws-cloudtrail-input-from-another-aws-account-bucket/5041>\
**Category:** Graylog Central (peer support)\
**Created:** [April 20, 2018, 7:32am UTC](https://community.graylog.org/t/set-aws-cloudtrail-input-from-another-aws-account-bucket/5041 "2018-04-20T07:32:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![qoovsxp](https://avatars.discourse-cdn.com/v4/letter/q/58f4c7/32.png) [@qoovsxp](https://community.graylog.org/u/qoovsxp)\
**Post date:** [April 20, 2018, 7:32am UTC](https://community.graylog.org/t/set-aws-cloudtrail-input-from-another-aws-account-bucket/5041/1 "2018-04-20T07:32:07Z")

</div>

Hi,

We follow this document to set sharing CloudTrail Log Files Between AWS Accounts.  
[https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-sharing-logs.html](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-sharing-logs.html)  
We put B AWS account’s cloudtrail logs to A AWS account bucket.  
And we let cloudtrail iam user can access A AWS account bucket.

We set a assume role to input try to get log from A AWS account bucket,but a SQS error occur.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/4dbee5f71e55392b800de1bc2d8be3a4723e3ca3.png)

But it occur can’t get log from bucket if we don’t set assume role to input.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/9/98aefe371b634fa0424b742f69212b065fef4c44.png)

Anyone can help us?

Thanks.

---

<div class="post-metadata">

**Author:** ![qoovsxp](https://avatars.discourse-cdn.com/v4/letter/q/58f4c7/32.png) [@qoovsxp](https://community.graylog.org/u/qoovsxp)\
**Post date:** [April 24, 2018, 1:39am UTC](https://community.graylog.org/t/set-aws-cloudtrail-input-from-another-aws-account-bucket/5041/2 "2018-04-24T01:39:54Z")

</div>

Continuing the discussion from [Set AWS cloudtrail input from another aws account bucket](https://community.graylog.org/t/set-aws-cloudtrail-input-from-another-aws-account-bucket/5041):

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 8, 2018, 1:39am UTC](https://community.graylog.org/t/set-aws-cloudtrail-input-from-another-aws-account-bucket/5041/3 "2018-05-08T01:39:58Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.