Interface GuS3BucketProps

interface GuS3BucketProps {
    accessControl?: BucketAccessControl;
    app: string;
    autoDeleteObjects?: boolean;
    blockPublicAccess?: BlockPublicAccess;
    bucketKeyEnabled?: boolean;
    bucketName?: string;
    cors?: CorsRule[];
    encryption?: BucketEncryption;
    encryptionKey?: IKey;
    enforceSSL?: boolean;
    eventBridgeEnabled?: boolean;
    intelligentTieringConfigurations?: IntelligentTieringConfiguration[];
    inventories?: Inventory[];
    lifecycleRules?: LifecycleRule[];
    metrics?: BucketMetrics[];
    minimumTLSVersion?: number;
    notificationsHandlerRole?: IRole;
    notificationsSkipDestinationValidation?: boolean;
    objectLockDefaultRetention?: ObjectLockRetention;
    objectLockEnabled?: boolean;
    objectOwnership?: ObjectOwnership;
    publicReadAccess?: boolean;
    replicationRole?: IRole;
    replicationRules?: ReplicationRule[];
    serverAccessLogsBucket?: IBucket;
    serverAccessLogsPrefix?: string;
    targetObjectKeyFormat?: TargetObjectKeyFormat;
    transferAcceleration?: boolean;
    transitionDefaultMinimumObjectSize?: TransitionDefaultMinimumObjectSize;
    versioned?: boolean;
    websiteErrorDocument?: string;
    websiteIndexDocument?: string;
    websiteRedirect?: RedirectTarget;
    websiteRoutingRules?: RoutingRule[];
}

Hierarchy (View Summary)

Omit<BucketProps, "removalPolicy">
AppIdentity
- GuS3BucketProps

Properties

`Optional` `Readonly`accessControl

accessControl?: BucketAccessControl

Specifies a canned ACL that grants predefined permissions to the bucket.

Default

BucketAccessControl.PRIVATE

app

app: string

`Optional` `Readonly`autoDeleteObjects

autoDeleteObjects?: boolean

Whether all objects should be automatically deleted when the bucket is removed from the stack or when the stack is deleted.

Requires the removalPolicy to be set to RemovalPolicy.DESTROY.

Warning if you have deployed a bucket with autoDeleteObjects: true, switching this to false in a CDK version before 1.126.0 will lead to all objects in the bucket being deleted. Be sure to update your bucket resources by deploying with CDK version 1.126.0 or later before switching this value to false.

Setting autoDeleteObjects to true on a bucket will add s3:PutBucketPolicy to the bucket policy. This is because during bucket deletion, the custom resource provider needs to update the bucket policy by adding a deny policy for s3:PutObject to prevent race conditions with external bucket writers.

Default

false

`Optional` `Readonly`blockPublicAccess

blockPublicAccess?: BlockPublicAccess

The block public access configuration of this bucket.

See

https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html

Default

- CloudFormation defaults will apply. New buckets and objects don't allow public access, but users can modify bucket policies or object permissions to allow public access

`Optional` `Readonly`bucketKeyEnabled

bucketKeyEnabled?: boolean

Whether Amazon S3 should use its own intermediary key to generate data keys.

Only relevant when using KMS for encryption.

If not enabled, every object GET and PUT will cause an API call to KMS (with the attendant cost implications of that).
If enabled, S3 will use its own time-limited key instead.

Only relevant, when Encryption is not set to BucketEncryption.UNENCRYPTED.

Default

- false

`Optional` `Readonly`bucketName

bucketName?: string

Physical name of this bucket.

Default

- Assigned by CloudFormation (recommended).

`Optional` `Readonly`cors

cors?: CorsRule[]

The CORS configuration of this bucket.

See

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-cors.html

Default

- No CORS configuration.

`Optional` `Readonly`encryption

encryption?: BucketEncryption

The kind of server-side encryption to apply to this bucket.

If you choose KMS, you can specify a KMS key via encryptionKey. If encryption key is not specified, a key will automatically be created.

Default

KMS if encryptionKey is specified, or S3_MANAGED otherwise.

`Optional` `Readonly`encryptionKey

encryptionKey?: IKey

External KMS key to use for bucket encryption.

The encryption property must be either not specified or set to KMS or DSSE. An error will be emitted if encryption is set to UNENCRYPTED or S3_MANAGED.

Default

If encryption is set to KMS and this property is undefined, a new KMS key will be created and associated with this bucket.

`Optional` `Readonly`enforceSSL

enforceSSL?: boolean

Enforces SSL for requests. S3.5 of the AWS Foundational Security Best Practices Regarding S3.

See

https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-ssl-requests-only.html

Default

false

`Optional` `Readonly`eventBridgeEnabled

eventBridgeEnabled?: boolean

Whether this bucket should send notifications to Amazon EventBridge or not.

Default

false

`Optional` `Readonly`intelligentTieringConfigurations

intelligentTieringConfigurations?: IntelligentTieringConfiguration[]

Intelligent Tiering Configurations

See

https://docs.aws.amazon.com/AmazonS3/latest/userguide/intelligent-tiering.html

Default

No Intelligent Tiiering Configurations.

`Optional` `Readonly`inventories

inventories?: Inventory[]

The inventory configuration of the bucket.

See

https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-inventory.html

Default

- No inventory configuration

`Optional` `Readonly`lifecycleRules

lifecycleRules?: LifecycleRule[]

Rules that define how Amazon S3 manages objects during their lifetime.

Default

- No lifecycle rules.

`Optional` `Readonly`metrics

metrics?: BucketMetrics[]

The metrics configuration of this bucket.

See

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-metricsconfiguration.html

Default

- No metrics configuration.

`Optional` `Readonly`minimumTLSVersion

minimumTLSVersion?: number

Enforces minimum TLS version for requests.

Requires enforceSSL to be enabled.

See

https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-object-tls-version

Default

No minimum TLS version is enforced.

`Optional` `Readonly`notificationsHandlerRole

notificationsHandlerRole?: IRole

The role to be used by the notifications handler

Default

- a new role will be created.

`Optional` `Readonly`notificationsSkipDestinationValidation

notificationsSkipDestinationValidation?: boolean

Skips notification validation of Amazon SQS, Amazon SNS, and Lambda destinations.

Default

false

`Optional` `Readonly`objectLockDefaultRetention

objectLockDefaultRetention?: ObjectLockRetention

The default retention mode and rules for S3 Object Lock.

Default retention can be configured after a bucket is created if the bucket already has object lock enabled. Enabling object lock for existing buckets is not supported.

See

https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-bucket-config-enable

Default

no default retention period

`Optional` `Readonly`objectLockEnabled

objectLockEnabled?: boolean

Enable object lock on the bucket.

Enabling object lock for existing buckets is not supported. Object lock must be enabled when the bucket is created.

See

https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-bucket-config-enable

Default

false, unless objectLockDefaultRetention is set (then, true)

`Optional` `Readonly`objectOwnership

objectOwnership?: ObjectOwnership

The objectOwnership of the bucket.

See

https://docs.aws.amazon.com/AmazonS3/latest/dev/about-object-ownership.html

Default

No ObjectOwnership configuration. By default, Amazon S3 sets Object Ownership to Bucket owner enforced. This means ACLs are disabled and the bucket owner will own every object.

`Optional` `Readonly`publicReadAccess

publicReadAccess?: boolean

Grants public read access to all objects in the bucket. Similar to calling bucket.grantPublicAccess()

Default

false

`Optional` `Readonly`replicationRole

replicationRole?: IRole

The role to be used by the replication.

When setting this property, you must also set replicationRules.

Default

- a new role will be created.

`Optional` `Readonly`replicationRules

replicationRules?: ReplicationRule[]

A container for one or more replication rules.

Default

- No replication

`Optional` `Readonly`serverAccessLogsBucket

serverAccessLogsBucket?: IBucket

Destination bucket for the server access logs.

Default

- If "serverAccessLogsPrefix" undefined - access logs disabled, otherwise - log to current bucket.

`Optional` `Readonly`serverAccessLogsPrefix

serverAccessLogsPrefix?: string

Optional log file prefix to use for the bucket's access logs. If defined without "serverAccessLogsBucket", enables access logs to current bucket with this prefix.

Default

- No log file prefix

`Optional` `Readonly`targetObjectKeyFormat

targetObjectKeyFormat?: TargetObjectKeyFormat

Optional key format for log objects.

Default

- the default key format is: [DestinationPrefix][YYYY]-[MM]-[DD]-[hh]-[mm]-[ss]-[UniqueString]

`Optional` `Readonly`transferAcceleration

transferAcceleration?: boolean

Whether this bucket should have transfer acceleration turned on or not.

Default

false

`Optional` `Readonly`transitionDefaultMinimumObjectSize

transitionDefaultMinimumObjectSize?: TransitionDefaultMinimumObjectSize

Indicates which default minimum object size behavior is applied to the lifecycle configuration.

To customize the minimum object size for any transition you can add a filter that specifies a custom objectSizeGreaterThan or objectSizeLessThan for lifecycleRules property. Custom filters always take precedence over the default transition behavior.

Default

- TransitionDefaultMinimumObjectSize.VARIES_BY_STORAGE_CLASS before September 2024,
otherwise TransitionDefaultMinimumObjectSize.ALL_STORAGE_CLASSES_128_K.

`Optional` `Readonly`versioned

versioned?: boolean

Whether this bucket should have versioning turned on or not.

Default

false (unless object lock is enabled, then true)

`Optional` `Readonly`websiteErrorDocument

websiteErrorDocument?: string

The name of the error document (e.g. "404.html") for the website. websiteIndexDocument must also be set if this is set.

Default

- No error document.

`Optional` `Readonly`websiteIndexDocument

websiteIndexDocument?: string

The name of the index document (e.g. "index.html") for the website. Enables static website hosting for this bucket.

Default

- No index document.

`Optional` `Readonly`websiteRedirect

websiteRedirect?: RedirectTarget

Specifies the redirect behavior of all requests to a website endpoint of a bucket.

If you specify this property, you can't specify "websiteIndexDocument", "websiteErrorDocument" nor , "websiteRoutingRules".

Default

- No redirection.

`Optional` `Readonly`websiteRoutingRules

websiteRoutingRules?: RoutingRule[]

Rules that define when a redirect is applied and the redirect behavior

Default

- No redirection rules.

Interface GuS3BucketProps

Hierarchy (View Summary)

Index

Properties

Properties

Optional ReadonlyaccessControl

Default

app

Optional ReadonlyautoDeleteObjects

Default

Optional ReadonlyblockPublicAccess

See

Default

Optional ReadonlybucketKeyEnabled

Default

Optional ReadonlybucketName

Default

Optional Readonlycors

See

Default

Optional Readonlyencryption

Default

Optional ReadonlyencryptionKey

Default

Optional ReadonlyenforceSSL

See

Default

Optional ReadonlyeventBridgeEnabled

Default

Optional ReadonlyintelligentTieringConfigurations

See

Default

Optional Readonlyinventories

See

Default

Optional ReadonlylifecycleRules

Default

Optional Readonlymetrics

See

Default

Optional ReadonlyminimumTLSVersion

See

Default

Optional ReadonlynotificationsHandlerRole

Default

Optional ReadonlynotificationsSkipDestinationValidation

Default

Optional ReadonlyobjectLockDefaultRetention

See

Default

Optional ReadonlyobjectLockEnabled

See

Default

Optional ReadonlyobjectOwnership

See

Default

Optional ReadonlypublicReadAccess

Default

Optional ReadonlyreplicationRole

Default

Optional ReadonlyreplicationRules

Default

Optional ReadonlyserverAccessLogsBucket

Default

Optional ReadonlyserverAccessLogsPrefix

Default

Optional ReadonlytargetObjectKeyFormat

Default

Optional ReadonlytransferAcceleration

Default

Optional ReadonlytransitionDefaultMinimumObjectSize

Default

Optional Readonlyversioned

Default

Optional ReadonlywebsiteErrorDocument

Default

Optional ReadonlywebsiteIndexDocument

Default

Optional ReadonlywebsiteRedirect

Default

`Optional` `Readonly`accessControl

`Optional` `Readonly`autoDeleteObjects

`Optional` `Readonly`blockPublicAccess

`Optional` `Readonly`bucketKeyEnabled

`Optional` `Readonly`bucketName

`Optional` `Readonly`cors

`Optional` `Readonly`encryption

`Optional` `Readonly`encryptionKey

`Optional` `Readonly`enforceSSL

`Optional` `Readonly`eventBridgeEnabled

`Optional` `Readonly`intelligentTieringConfigurations

`Optional` `Readonly`inventories

`Optional` `Readonly`lifecycleRules

`Optional` `Readonly`metrics

`Optional` `Readonly`minimumTLSVersion

`Optional` `Readonly`notificationsHandlerRole

`Optional` `Readonly`notificationsSkipDestinationValidation

`Optional` `Readonly`objectLockDefaultRetention

`Optional` `Readonly`objectLockEnabled

`Optional` `Readonly`objectOwnership

`Optional` `Readonly`publicReadAccess

`Optional` `Readonly`replicationRole

`Optional` `Readonly`replicationRules

`Optional` `Readonly`serverAccessLogsBucket

`Optional` `Readonly`serverAccessLogsPrefix

`Optional` `Readonly`targetObjectKeyFormat

`Optional` `Readonly`transferAcceleration

`Optional` `Readonly`transitionDefaultMinimumObjectSize

`Optional` `Readonly`versioned

`Optional` `Readonly`websiteErrorDocument

`Optional` `Readonly`websiteIndexDocument

`Optional` `Readonly`websiteRedirect

`Optional` `Readonly`websiteRoutingRules