Trusted environments
The Trusted environment feature enables account re-encryption to pass when an account is migrated across envrionments. For example, when you migrate a project from Env1 to Env2, any account used in the source project cannot be validated because it was created in Env1, and Env2 does not have the encryption keys used in Env1. However, once you add Env2 as a trusted org in Env1, all accounts associated with the migrated project can be validated.
Important: This feature applies to the environments that use standard encryption.
If you are migrating or copying accounts or policies to a different environment, then
- The source environment must recognize the destination environment as a trusted environment.
- The destination environment must have at least the same security level as the source environment.