aws-solutions / cognito-user-profiles-export-reference-architecture

A reference architecture for exporting user profiles, group details, and group memberships from an Amazon Cognito User Pool to an Amazon DynamoDB global table using AWS Step Functions and AWS Lambda.
https://aws.amazon.com/solutions/implementations/cognito-user-profiles-export-reference-architecture/
Apache License 2.0
53 stars 19 forks source link

Fix S3 Bucket ACL conflict with BucketOwnerEnforced #28

Closed closesimple-wl closed 1 year ago

closesimple-wl commented 1 year ago

We received this error when deploying this solution:

ResourceLogicalId:UserImportJobMappingFilesLogsBucket, ResourceType:AWS::S3::Bucket, ResourceStatusReason:Bucket cannot have ACLs set with ObjectOwnership's BucketOwnerEnforced setting (Service: Amazon S3; Status Code: 400; Error Code: InvalidBucketAclWithObjectOwnership; Request ID: 55BAZN6ED158H9A0; S3 Extended Request ID: Xyuo3mSIU9QcRheNg96VLQLZrB8u333eN629//mAEZ+AVRDP7UfBh4KTWq2luwt0AJPInIl/C8BjjvyGi4OKuA==; Proxy: null).

This change to S3's behavior caused this bug: https://aws.amazon.com/about-aws/whats-new/2022/12/amazon-s3-automatically-enable-block-public-access-disable-access-control-lists-buckets-april-2023/

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

deshruch commented 1 year ago

Fixed in v1.0.2