This message was deleted.
# general
s
This message was deleted.
l
Is there a way to set
bucket-owner-full-control
, or specify a different backend role, or anything that lets one stack read output from the other?
b
you'd need to do something out of band with the bucket policy here, its not natively supported
l
Is there a way to set
"s3:x-amz-acl": "bucket-owner-full-control"
on all calls to s3:PutObject? This isn't my area of expertise...
b
i've never run into this personally, so not totally sure, but this seems to get the job done? https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-owner-access/
I'm surprised you're hettig this with two AWS profiles in the same account
l
The profiles are in different accounts. The bucket has a policy to allow writes from the "foreign" account.
That link describes what I want to happen: how do I get Pulumi to use that when uploading the state files?
I think the way to go will be to use a single profile for all Pulumi interactions, and to use providers which explicitly change profile based on what they're doing / which account they're using. I'm guessing that the provider used for a resource has nothing to do with the changes to state? They're always done using the default provider / profile?