refactor(s3): object ownership support - Githubissues

hamlet-io / engine

Framework for managing cloud infrastructure via templates. It is part of the broader Hamlet devops framework.

GNU General Public License v3.0

5 stars 5 forks source link

refactor(s3): object ownership support #2104

Closed ml019 closed 1 year ago

ml019 commented 1 year ago

Intent of Change

Refactor (non-breaking change which improves the structure or operation of the implementation)
New feature (non-breaking change which adds functionality)

Description

Add support for control of the object ownership for the bucket.

Also, per https://docs.aws.amazon.com/AmazonS3/latest/userguide/enable-server-access-logging.html, switch from using an ACL to using bucket policy to permit logging to the audit bucket.

Motivation and Context

align with AWS best practices
avoid deployment failures where an SCP enforces bucket owner object ownership.
How Has This Been Tested?

Local generation. Use in customer site will also be undertaken once part of the unicycle release.

Related Changes

Prerequisite PRs:

None

Dependent PRs:

None

Consumer Actions:

None