Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Update object_ownership variable description #121

Conversation

tsybanov
Copy link
Contributor

Description

Update description of the object_ownership variable by adding information about the BucketOwnerEnforced option.

Motivation and Context

On November 30, 2021, Amazon announced a new S3 Object Ownership setting, BucketOwnerEnforced.
Ref. https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-s3-object-ownership-simplify-access-management-data-s3/

Amazon S3 introduces a new S3 Object Ownership setting, Bucket owner enforced, that disables access control lists (ACLs), simplifying access management for data stored in S3. When you apply this bucket-level setting, every object in an S3 bucket is owned by the bucket owner, and ACLs are no longer used to grant permissions

The new setting already has been integrated into AWS provider in v.3.69.0
Ref. hashicorp/terraform-provider-aws#21980

Also, we might consider setting the default value to the BucketOwnerEnforced as per AWS recommendation.
Ref. https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html

Breaking Changes

How Has This Been Tested?

  • I have tested and validated these changes using one or more of the provided examples/* projects
    The change has been tested in production with updated AWS provider to v.3.69.0

Add `BucketOwnerEnforced` value with a description to available options.
Due to the introduction of the new setting for S3 Bucket Ownership
By adding information about the new S3 Ownership setting
BucketOwnerEnforced
Copy link
Member

@bryantbiggs bryantbiggs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good - was confused on the version bump but I see its tied to the underlying AWS SDK usage so it must be bumped. Thanks for the PR @tsybanov !

@antonbabenko 👍🏽

@tsybanov tsybanov changed the title Update object_ownership variable description feat: Update object_ownership variable description Jan 11, 2022
@tsybanov
Copy link
Contributor Author

Thanks, @bryantbiggs!

Any thoughts on changing the default setting of the Object Ownership to BucketOwnerEnforced as per AWS recommendation?

@antonbabenko antonbabenko merged commit ce9e719 into terraform-aws-modules:master Jan 12, 2022
antonbabenko pushed a commit that referenced this pull request Jan 12, 2022
## [2.12.0](v2.11.2...v2.12.0) (2022-01-12)

### Features

* Update object_ownership variable description ([#121](#121)) ([ce9e719](ce9e719))
@antonbabenko
Copy link
Member

This PR is included in version 2.12.0 🎉

@github-actions
Copy link

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Oct 28, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants