What is a dedicated forensics account?

You may choose to deploy into an AWS account dedicated to storing forensics data securely.

You can then use cross-account roles to bring data into the forensics account. / Forensic Acquisition and Investigation copies data back into the forensics account, and performs processing there.

For more on this best practice, see:

• Forensic investigation environment strategies in the AWS Cloud.
• Computer forensics chain of custody in Azure
• How to conduct live network forensics in GCP