February 2020
Intermediate to advanced
440 pages
13h 51m
English
In this recipe, we created a CMK in account 1 with permissions for account 2. After that, we successfully encrypted data on the other account with an administrator user's profile from CLI.
To encrypt using a non-administrator user, an administrator user of account 2 needs to delegate permissions to the user or role that needs access. We did this through an IAM policy. The policy was created from the console. Then, we added this policy to our non-administrator user, testuser.
For more details on the policy document's structure, refer to the Using key policies with conditional keys recipe.
Read now
Unlock full access