ilyesAj

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ReadBucketA",
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetObject"
            ],

ilyesAj

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::ACCOUNT_B:user/s3-cross-account"
            },
            "Action": [
                "s3:ListBucket",

ilyesAj

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::Account-B:user/s3-cross-account"
            },
            "Action": [
                "s3:GetObject",

ilyesAj

#!/bin/bash
# this script will allow you to append policy within a bucket 
# you need to install jq awscli to use this script
[ $# != 1 ] && { echo "Usage: $0 \"bucket_name\""; exit 1; }

bucket="$1"

json_to_add="{\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::ACCOUNT-B:user/s3-cross-account\"},\"Action\":[\"s3:ListBucket\",\"s3:GetObject\"],\"Resource\":[\"arn:aws:s3:::${bucket}\",\"arn:aws:s3:::${bucket}/*\"]}"
# get bucket policy
aws s3api get-bucket-policy --bucket ${bucket} --query Policy --output text > policy-${bucket}.json

ilyesAj

apiVersion: v1
kind: Namespace
metadata:
  name: s3-copy
---
apiVersion: batch/v1
kind: Job
metadata:
  name:  s3-bucket-a-sync
  namespace: s3-copy

ilyesAj

apiVersion: v1
kind: Namespace
metadata:
  name: s3-copy
---
apiVersion: batch/v1
kind: Job
metadata:
  name:  s3-copy-bucket-a
  namespace: s3-copy

ilyesAj

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: pv-mounter
spec:
  selector:
    matchLabels:
      app: pv-mounter
  template: