We are looking to setup S3 bucket replication from a SaaS provider (in a different tenant and account, but same S3 region) to our S3 bucket to capture logs from the SaaS application.
Typically our S3 buckets are NOT accessible outside of our VPC. No public access.
When this replication is setup, we’ve given the pushing IAM account encrypted write permissions on our bucket. When data flows, does it do it all internally within the S3 region securely on the AWS backbone, or will it traverse the public internet requiring us to open the S3 bucket outside of our VPC?
New contributor
Ryan Crawcour is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.