AWS Security Cookbook

Getting ready

We need two working AWS accounts (let's call them account A and account B), configured as follows:

1. Note down the canonical ID of account B: I have noted down mine as e280db54f21834544a8162b8fc5d23851972d31e1ae3560240156fa14d66b952.
2. A bucket in account A with a file in it: I will be using a bucket name awsseccookbook, with a file named image-heartin-k.png. Replace them with your bucket name and filename.

3. A user with administrator permission in account A and account B: We'll create profiles for these users in the CLI. I am using the awssecadmin and awschild1admin CLI profiles, respectively.
4. A user or group with no permission in account B: I have created a group, testusergroup, and added the testuser user to the group. I will ...