title: S3 Cross Account Notifications
body: <p>It is possible to send S3 events from Account A to an SQS topic in Account B. But, the only way I have been able to achieve this is by opening the permissions for the sendMessage action in SQS to allow everyone access.</p>
  
  <p>Is it possible to configure S3 events to sendMessage to a different account with some permission restrictions in place on the SQS topic? </p>
  
  <p>For example, if I try to restrict access to a specific account (e.g. 123456789012, I receive an error in the S3 console when I try to save the event: "Unable to validate the following destination configurations : Permissions on the destination queue do not allow S3 to publish notifications from this bucket"</p>
  
  <pre><code>{
    "Version": "2012-10-17",
    "Id": "sqs-permission",
    "Statement": [
      {
        "Sid": "sqs-permision-statement",
        "Effect": "Allow",
        "Principal": {
          "AWS": "123456789012"
        },
        "Action": "SQS:SendMessage",
        "Resource": "arn:aws:sqs:us-east-1:210987654321:my-queue"
      }
    ]
  }
  </code></pre>