Skip to content

feat: rplt 828 bucket policy update #11553

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

bashleigh
Copy link
Contributor

Custom resource to add conditions to the bucket policies. Reverse method exists.

Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Closing this pull request since the title does not match ^(?:(?:[WIP] ?)?(?:build|ci|chore|docs|task|feat|fix|perf|refactor|revert|style|test):(?:\ +?#\d+?\ +?)?.)|(?:[Snyk].) pattern. Please fix the title and re-open the pull request.

@bashleigh bashleigh changed the title feat rplt 828 bucket policy update feat: rplt 828 bucket policy update Apr 14, 2025
@bashleigh bashleigh reopened this Apr 14, 2025
Copy link
Contributor

@joshbalfour joshbalfour left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

couple of things idk if u wanna care about

environment: {
PAAS_ACCOUNT_ID: paasAcountId,
IAAS_ACCOUNT_ID: iaasAccountId,
BUCKETS: [liveBucket.bucketName, logBucket.bucketName, repoBucket.bucketName, versionBucket.bucketName].join(
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it won't re-run if you change the env vars btw, don't know if you care about that

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

naa all good +1

'resolve-S3-bucket-policy-conditions-custom-resource',
{
handler: 'dist/resolve-s3-bucket-policy-conditions.resolveS3BucketPolicyConditions',
code: aws_lambda.Code.fromAsset('bundle/resolve-s3-bucket-policy-conditions.zip'),
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you could use Nodejsfunction here instead of bundling it then using the zip

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oooo really? I'll check that out!

new CustomResource(scope, 'resolve-s3-bucket-policy-conditions-custom-resource', {
serviceToken: resourceProvider.serviceToken,
properties: {
fistonly: true,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants