Chapter 3 of 5 · 2 min
Can an S3 bucket be shared with another AWS account?
SHORT ANSWER
Yes, and it costs nothing extra. A policy on the bucket names the other company’s Amazon account and says what it may do. Moving the bucket to them is the thing that is not possible.
The lesson 5 film is on chapter 1.
Three ways to share
- A bucket policy, a rule on the bucket, that names their account. Simplest; they then allow their own people to use it.
- An IAM role, a role they borrow, with an external ID, a secret code, in the handshake so nobody else can. The safer pattern for vendors and services.
- An access point, a side door: one address and one set of rules per partner, so the bucket policy never becomes a list of everyone you have ever worked with.
Moving a bucket
Bucket names belong to the account that created them, so a bucket cannot change hands. To move the files, create a bucket in the other account, let it read yours, and copy.
- $5per million files
- the copy, billed as fetches
- $20per TB
- on top, if the two buckets are in different Amazon regions
Prices are for US East, October 2026. Secure AWS access with IAM roles and external IDs has every rate and the steps.
NEXT · CHAPTER 4 OF 5How do I keep the bucket private?A new bucket is already private. Keeping it that way is the work.The same bucket, two ways
Compare with the AWS Console See the steps to open, share and give a colleague access in the AWS Console and in BucketDesk, side by side.