hard★ EssentialNewAmazon & AWSJPMorgan ChaseInfosys

A vendor needs to read objects from our S3 bucket from their own AWS account. How do you set that up safely?

Cross-account access is easy to grant and easy to get wrong. External IDs, scoped roles and audit trails separate a controlled bridge from an open door any tenant can walk through.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Cross-account access is easy to grant and easy to get wrong. External IDs, scoped roles and audit trails separate a controlled bridge from an open door any tenant can walk through.

20 answers per topic instead of 10, and your progress kept · no cardor unlock all 390 remaining answers · ₹2,000 / $25

UP NEXT ON YOUR JOURNEY

Next in this trackSCPs sit above every account in the organisation. What are they actually for, and where do teams get burned?Next in this trackFinance asks why we pay for VPC endpoints when a NAT gateway already exists. What is the honest answer?Next in this trackInstances in our VPC cannot resolve the internal.corp names that on-premises systems depend on. How is hybrid DNS supposed to be wired?

DISCUSSION · 0

Nothing here yet. Say how you would answer it.