unable to create vertical scaling stack using ops-automator.template

0

Hello, how can i create vertical scaling stack using ops-automator.template. when i tried to create stack was failing with below error. and would like to try to create stack without time based events and Dynamodb

Bucket cannot have ACLs set with ObjectOwnership's BucketOwnerEnforced setting (Service: Amazon S3; Status Code: 400; Error Code: InvalidBucketAclWithObjectOwnership; Request ID:

Regards, Seetharam.

질문됨 9달 전209회 조회
1개 답변
0

Due to the new changes in April, the newly created S3 buckets have S3 Block Public Access enable and S3 access control lists (ACLs) disable automatically. So if you want to enable ACLs for a bucket, you can set the ObjectOwnership parameter to ObjectWriter. The ops-automator template is creating one of the S3 bucket through S3LoggingBucket resource which has AccessControl set to LogDeliveryWrite, therefore according to the new policy for enabling ACLs, you have to add ObjectOwnership: ObjectWriter, otherwise you will encounter the below error :

Bucket cannot have ACLs set with ObjectOwnership's BucketOwnerEnforced setting (Service: Amazon S3; Status Code: 400; Error Code: InvalidBucketAclWithObjectOwnership; Request ID

In ops-automator template, you can edit the template and add ObjectOwnership to ObjectWriter, which looks like below :

  S3LoggingBucket:
    DeletionPolicy: Retain
    Type: 'AWS::S3::Bucket'
    Properties:
      BucketName: !Sub 'aws-opsautomator-s3-access-logs-${AWS::AccountId}-${AWS::Region}'
      AccessControl: LogDeliveryWrite
      OwnershipControls:                 ### Add ObjectOwnership to ObjectWriter
        Rules:
          - ObjectOwnership: ObjectWriter
      VersioningConfiguration:
        Status: Enabled
      BucketEncryption:
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: AES256
      Tags:
        - Key: Name
          Value: AWS Ops Automator Access Logs

For more information related to the changes, you can refer to this Amazon blog and similar repost article.

AWS
지원 엔지니어
답변함 9달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠