PrivaceraCloud Documentation

Create or use two AWS accounts, Account A and Account B.

Log in to AWS console as account A and create an IAMrole.

Revise this AWS IAM Role in Account A so that it has full access to the data resources that will be connected to your PrivaceraCloud account.

Establish IAM Role trust relationship with the PrivaceraCloud AWS access role. For more information, see AWS Access with IAM.

Log in to Account B in your AWS console to access the bucket through dataserver.

Select Bucket B and update the bucket policy as shown in the following sample JSON.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::12345678:role/DataServer_Role"
                ]
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::bucketB/*",
                "arn:aws:s3:::bucketB"
            ]
        }
    ]
}

On PrivaceraCloud, add or update the IAM role ‘arn:aws:iam::12345678:role/DataServer_Role” in S3 application.

Once the S3 application is configured you can access Bucket B from Account B through AWS-CLI. For more information, see Scripts for AWS CLI or Azure CLI for managing connected applications..

You can access Bucket B from Databricks cluster. For more information, see Databricks.