Type object
Schema URL https://catalog.lintel.tools/schemas/schemastore/serverless-framework-configuration/_shared/latest--aws-s3-bucket.json
Parent schema serverless-framework-configuration
Type: object

Resource Type definition for AWS::S3::Bucket. Source:- No source definition found, add manually please

Properties

AccelerateConfiguration object
1 nested properties
AccelerationStatus string | Aws_CF_FunctionString required

Configures the transfer acceleration state for an Amazon S3 bucket.

AccessControl string | Aws_CF_FunctionString

A canned access control list (ACL) that grants predefined permissions to the bucket.

AnalyticsConfigurations AnalyticsConfiguration[]

The configuration and any analyses for the analytics filter of an Amazon S3 bucket.

uniqueItems=true
BucketEncryption object

Specifies default encryption for a bucket using server-side encryption with either Amazon S3-managed keys (SSE-S3) or AWS KMS-managed keys (SSE-KMS).

1 nested properties
ServerSideEncryptionConfiguration ServerSideEncryptionRule[] required

Specifies the default server-side-encryption configuration.

uniqueItems=true
BucketName string | Aws_CF_FunctionString

A name for the bucket. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.

CorsConfiguration object
1 nested properties
CorsRules CorsRule[] required
uniqueItems=true
IntelligentTieringConfigurations IntelligentTieringConfiguration[]

Specifies the S3 Intelligent-Tiering configuration for an Amazon S3 bucket.

uniqueItems=true
InventoryConfigurations InventoryConfiguration[]

The inventory configuration for an Amazon S3 bucket.

uniqueItems=true
LifecycleConfiguration object
1 nested properties
Rules Rule[] required

A lifecycle rule for individual objects in an Amazon S3 bucket.

uniqueItems=true
LoggingConfiguration object
2 nested properties
DestinationBucketName string | Aws_CF_FunctionString

The name of an Amazon S3 bucket where Amazon S3 store server access log files. You can store log files in any bucket that you own. By default, logs are stored in the bucket where the LoggingConfiguration property is defined.

LogFilePrefix string | Aws_CF_FunctionString
MetricsConfigurations MetricsConfiguration[]

Settings that define a metrics configuration for the CloudWatch request metrics from the bucket.

uniqueItems=true
NotificationConfiguration object

Describes the notification configuration for an Amazon S3 bucket.

4 nested properties
EventBridgeConfiguration object

Describes the Amazon EventBridge notification configuration for an Amazon S3 bucket.

1 nested properties
EventBridgeEnabled boolean required

Specifies whether to send notifications to Amazon EventBridge when events occur in an Amazon S3 bucket.

Default: "true"
LambdaConfigurations LambdaConfiguration[]
uniqueItems=true
QueueConfigurations QueueConfiguration[]
uniqueItems=true
TopicConfigurations TopicConfiguration[]
uniqueItems=true
ObjectLockConfiguration object
2 nested properties
ObjectLockEnabled string | Aws_CF_FunctionString
Rule object

The Object Lock rule in place for the specified object.

1 nested properties
DefaultRetention object

The default retention period that you want to apply to new objects placed in the specified bucket.

3 nested properties
Years integer
Days integer
Mode string | Aws_CF_FunctionString
ObjectLockEnabled boolean

Indicates whether this bucket has an Object Lock configuration enabled.

OwnershipControls object
1 nested properties
Rules OwnershipControlsRule[] required
uniqueItems=true
PublicAccessBlockConfiguration object

Configuration that defines how Amazon S3 handles public access.

4 nested properties
BlockPublicAcls boolean

Specifies whether Amazon S3 should block public access control lists (ACLs) for this bucket and objects in this bucket. Setting this element to TRUE causes the following behavior:

  • PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.
  • PUT Object calls fail if the request includes a public ACL. Enabling this setting doesn't affect existing policies or ACLs.
BlockPublicPolicy boolean

Specifies whether Amazon S3 should block public bucket policies for this bucket. Setting this element to TRUE causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access. Enabling this setting doesn't affect existing bucket policies.

IgnorePublicAcls boolean

Specifies whether Amazon S3 should ignore public ACLs for this bucket and objects in this bucket. Setting this element to TRUE causes Amazon S3 to ignore all public ACLs on this bucket and objects in this bucket. Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set.

RestrictPublicBuckets boolean

Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to TRUE restricts access to this bucket to only AWS services and authorized users within this account if the bucket has a public policy. Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked.

ReplicationConfiguration object

A container for replication rules. You can add up to 1,000 rules. The maximum size of a replication configuration is 2 MB.

2 nested properties
Role string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that Amazon S3 assumes when replicating objects.

Rules ReplicationRule[] required

A container for one or more replication rules.

uniqueItems=true
Tags Tag[]

An arbitrary set of tags (key-value pairs) for this S3 bucket.

VersioningConfiguration object

Describes the versioning state of an Amazon S3 bucket.

1 nested properties
Status string | Aws_CF_FunctionString required

The versioning state of the bucket.

WebsiteConfiguration object

Specifies website configuration parameters for an Amazon S3 bucket.

4 nested properties
ErrorDocument string | Aws_CF_FunctionString

The name of the error document for the website.

IndexDocument string | Aws_CF_FunctionString

The name of the index document for the website.

RoutingRules RoutingRule[]
RedirectAllRequestsTo object

Specifies the redirect behavior of all requests to a website endpoint of an Amazon S3 bucket.

2 nested properties
HostName string | Aws_CF_FunctionString required

Name of the host where requests are redirected.

Protocol string | Aws_CF_FunctionString

Protocol to use when redirecting requests. The default is the protocol that is used in the original request.

Definitions

TagFilter object

Tags to use to identify a subset of objects for an Amazon S3 bucket.

Value string | Aws_CF_FunctionString required
Key string | Aws_CF_FunctionString required
Destination object

Specifies information about where to publish analysis or configuration results for an Amazon S3 bucket and S3 Replication Time Control (S3 RTC).

BucketArn string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the bucket to which data is exported.

Format string | Aws_CF_FunctionString required

Specifies the file format used when exporting data to Amazon S3.

BucketAccountId string | Aws_CF_FunctionString

The account ID that owns the destination S3 bucket.

Prefix string | Aws_CF_FunctionString

The prefix to use when exporting data. The prefix is prepended to all results.

AccelerateConfiguration object
AccelerationStatus string | Aws_CF_FunctionString required

Configures the transfer acceleration state for an Amazon S3 bucket.

AnalyticsConfiguration object

Specifies the configuration and any analyses for the analytics filter of an Amazon S3 bucket.

StorageClassAnalysis object required

Specifies data related to access patterns to be collected and made available to analyze the tradeoffs between different storage classes for an Amazon S3 bucket.

1 nested properties
DataExport object

Specifies how data related to the storage class analysis for an Amazon S3 bucket should be exported.

2 nested properties
Destination object required

Specifies information about where to publish analysis or configuration results for an Amazon S3 bucket and S3 Replication Time Control (S3 RTC).

OutputSchemaVersion string | Aws_CF_FunctionString required

The version of the output schema to use when exporting data.

Id string | Aws_CF_FunctionString required

The ID that identifies the analytics configuration.

TagFilters TagFilter[]
uniqueItems=true
Prefix string | Aws_CF_FunctionString

The prefix that an object must have to be included in the analytics results.

StorageClassAnalysis object

Specifies data related to access patterns to be collected and made available to analyze the tradeoffs between different storage classes for an Amazon S3 bucket.

DataExport object

Specifies how data related to the storage class analysis for an Amazon S3 bucket should be exported.

2 nested properties
Destination object required

Specifies information about where to publish analysis or configuration results for an Amazon S3 bucket and S3 Replication Time Control (S3 RTC).

4 nested properties
BucketArn string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the bucket to which data is exported.

Format string | Aws_CF_FunctionString required

Specifies the file format used when exporting data to Amazon S3.

BucketAccountId string | Aws_CF_FunctionString

The account ID that owns the destination S3 bucket.

Prefix string | Aws_CF_FunctionString

The prefix to use when exporting data. The prefix is prepended to all results.

OutputSchemaVersion string | Aws_CF_FunctionString required

The version of the output schema to use when exporting data.

DataExport object

Specifies how data related to the storage class analysis for an Amazon S3 bucket should be exported.

Destination object required

Specifies information about where to publish analysis or configuration results for an Amazon S3 bucket and S3 Replication Time Control (S3 RTC).

4 nested properties
BucketArn string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the bucket to which data is exported.

Format string | Aws_CF_FunctionString required

Specifies the file format used when exporting data to Amazon S3.

BucketAccountId string | Aws_CF_FunctionString

The account ID that owns the destination S3 bucket.

Prefix string | Aws_CF_FunctionString

The prefix to use when exporting data. The prefix is prepended to all results.

OutputSchemaVersion string | Aws_CF_FunctionString required

The version of the output schema to use when exporting data.

BucketEncryption object

Specifies default encryption for a bucket using server-side encryption with either Amazon S3-managed keys (SSE-S3) or AWS KMS-managed keys (SSE-KMS).

ServerSideEncryptionConfiguration ServerSideEncryptionRule[] required

Specifies the default server-side-encryption configuration.

uniqueItems=true
ServerSideEncryptionRule object

Specifies the default server-side encryption configuration.

BucketKeyEnabled boolean

Specifies whether Amazon S3 should use an S3 Bucket Key with server-side encryption using KMS (SSE-KMS) for new objects in the bucket. Existing objects are not affected. Setting the BucketKeyEnabled element to true causes Amazon S3 to use an S3 Bucket Key. By default, S3 Bucket Key is not enabled.

ServerSideEncryptionByDefault object

Specifies the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied.

2 nested properties
SSEAlgorithm string | Aws_CF_FunctionString required
KMSMasterKeyID string | Aws_CF_FunctionString

"KMSMasterKeyID" can only be used when you set the value of SSEAlgorithm as aws:kms.

ServerSideEncryptionByDefault object

Specifies the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied.

SSEAlgorithm string | Aws_CF_FunctionString required
KMSMasterKeyID string | Aws_CF_FunctionString

"KMSMasterKeyID" can only be used when you set the value of SSEAlgorithm as aws:kms.

CorsConfiguration object
CorsRules CorsRule[] required
uniqueItems=true
CorsRule object

A set of origins and methods (cross-origin access that you want to allow). You can add up to 100 rules to the configuration.

AllowedMethods string[] required

An HTTP method that you allow the origin to execute.

uniqueItems=true
AllowedOrigins string[] required

One or more origins you want customers to be able to access the bucket from.

uniqueItems=true
AllowedHeaders string[]

Headers that are specified in the Access-Control-Request-Headers header.

uniqueItems=true
ExposedHeaders string[]

One or more headers in the response that you want customers to be able to access from their applications (for example, from a JavaScript XMLHttpRequest object).

uniqueItems=true
Id string | Aws_CF_FunctionString

A unique identifier for this rule.

MaxAge integer

The time in seconds that your browser is to cache the preflight response for the specified resource.

min=0
IntelligentTieringConfiguration object
Id string | Aws_CF_FunctionString required

The ID used to identify the S3 Intelligent-Tiering configuration.

Status string | Aws_CF_FunctionString required

Specifies the status of the configuration.

Tierings Tiering[] required

Specifies a list of S3 Intelligent-Tiering storage class tiers in the configuration. At least one tier must be defined in the list. At most, you can specify two tiers in the list, one for each available AccessTier: ARCHIVE_ACCESS and DEEP_ARCHIVE_ACCESS.

uniqueItems=true
Prefix string | Aws_CF_FunctionString

An object key name prefix that identifies the subset of objects to which the rule applies.

TagFilters TagFilter[]

A container for a key-value pair.

uniqueItems=true
Tiering object
AccessTier string | Aws_CF_FunctionString required

S3 Intelligent-Tiering access tier. See Storage class for automatically optimizing frequently and infrequently accessed objects for a list of access tiers in the S3 Intelligent-Tiering storage class.

Days integer required

The number of consecutive days of no access after which an object will be eligible to be transitioned to the corresponding tier. The minimum number of days specified for Archive Access tier must be at least 90 days and Deep Archive Access tier must be at least 180 days. The maximum can be up to 2 years (730 days).

InventoryConfiguration object
Destination object required

Specifies information about where to publish analysis or configuration results for an Amazon S3 bucket and S3 Replication Time Control (S3 RTC).

4 nested properties
BucketArn string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the bucket to which data is exported.

Format string | Aws_CF_FunctionString required

Specifies the file format used when exporting data to Amazon S3.

BucketAccountId string | Aws_CF_FunctionString

The account ID that owns the destination S3 bucket.

Prefix string | Aws_CF_FunctionString

The prefix to use when exporting data. The prefix is prepended to all results.

Enabled boolean required

Specifies whether the inventory is enabled or disabled.

Id string | Aws_CF_FunctionString required

The ID used to identify the inventory configuration.

IncludedObjectVersions string | Aws_CF_FunctionString required

Object versions to include in the inventory list.

ScheduleFrequency string | Aws_CF_FunctionString required

Specifies the schedule for generating inventory results.

OptionalFields string[]

Contains the optional fields that are included in the inventory results.

uniqueItems=true
Prefix string | Aws_CF_FunctionString

The prefix that is prepended to all inventory results.

LifecycleConfiguration object
Rules Rule[] required

A lifecycle rule for individual objects in an Amazon S3 bucket.

uniqueItems=true
Rule object

You must specify at least one of the following properties: AbortIncompleteMultipartUpload, ExpirationDate, ExpirationInDays, NoncurrentVersionExpirationInDays, NoncurrentVersionTransition, NoncurrentVersionTransitions, Transition, or Transitions.

Status string | Aws_CF_FunctionString required
AbortIncompleteMultipartUpload object

Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload.

1 nested properties
DaysAfterInitiation integer required

Specifies the number of days after which Amazon S3 aborts an incomplete multipart upload.

min=0
ExpirationDate string | Aws_CF_FunctionString

The date value in ISO 8601 format. The timezone is always UTC. (YYYY-MM-DDThh:mm:ssZ)

ExpirationInDays integer
ExpiredObjectDeleteMarker boolean
Id string | Aws_CF_FunctionString
NoncurrentVersionExpirationInDays integer
NoncurrentVersionExpiration object

Container for the expiration rule that describes when noncurrent objects are expired. If your bucket is versioning-enabled (or versioning is suspended), you can set this action to request that Amazon S3 expire noncurrent object versions at a specific period in the object's lifetime

2 nested properties
NoncurrentDays integer required

Specified the number of days an object is noncurrent before Amazon S3 can perform the associated action

NewerNoncurrentVersions integer

Specified the number of newer noncurrent and current versions that must exists before performing the associated action

NoncurrentVersionTransition object

Container for the transition rule that describes when noncurrent objects transition to the STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER_IR, GLACIER, or DEEP_ARCHIVE storage class. If your bucket is versioning-enabled (or versioning is suspended), you can set this action to request that Amazon S3 transition noncurrent object versions to the STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER_IR, GLACIER, or DEEP_ARCHIVE storage class at a specific period in the object's lifetime.

3 nested properties
StorageClass string | Aws_CF_FunctionString required

The class of storage used to store the object.

TransitionInDays integer required

Specifies the number of days an object is noncurrent before Amazon S3 can perform the associated action.

NewerNoncurrentVersions integer

Specified the number of newer noncurrent and current versions that must exists before performing the associated action

NoncurrentVersionTransitions NoncurrentVersionTransition[]
uniqueItems=true
Prefix string | Aws_CF_FunctionString
TagFilters TagFilter[]
uniqueItems=true
ObjectSizeGreaterThan string | Aws_CF_FunctionString
ObjectSizeLessThan string | Aws_CF_FunctionString
Transition object

You must specify at least one of "TransitionDate" and "TransitionInDays"

3 nested properties
StorageClass string | Aws_CF_FunctionString required
TransitionDate string | Aws_CF_FunctionString

The date value in ISO 8601 format. The timezone is always UTC. (YYYY-MM-DDThh:mm:ssZ)

TransitionInDays integer
Transitions Transition[]
uniqueItems=true
AbortIncompleteMultipartUpload object

Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload.

DaysAfterInitiation integer required

Specifies the number of days after which Amazon S3 aborts an incomplete multipart upload.

min=0
iso8601UTC string | Aws_CF_FunctionString

The date value in ISO 8601 format. The timezone is always UTC. (YYYY-MM-DDThh:mm:ssZ)

NoncurrentVersionExpiration object

Container for the expiration rule that describes when noncurrent objects are expired. If your bucket is versioning-enabled (or versioning is suspended), you can set this action to request that Amazon S3 expire noncurrent object versions at a specific period in the object's lifetime

NoncurrentDays integer required

Specified the number of days an object is noncurrent before Amazon S3 can perform the associated action

NewerNoncurrentVersions integer

Specified the number of newer noncurrent and current versions that must exists before performing the associated action

NoncurrentVersionTransition object

Container for the transition rule that describes when noncurrent objects transition to the STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER_IR, GLACIER, or DEEP_ARCHIVE storage class. If your bucket is versioning-enabled (or versioning is suspended), you can set this action to request that Amazon S3 transition noncurrent object versions to the STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER_IR, GLACIER, or DEEP_ARCHIVE storage class at a specific period in the object's lifetime.

StorageClass string | Aws_CF_FunctionString required

The class of storage used to store the object.

TransitionInDays integer required

Specifies the number of days an object is noncurrent before Amazon S3 can perform the associated action.

NewerNoncurrentVersions integer

Specified the number of newer noncurrent and current versions that must exists before performing the associated action

Transition object

You must specify at least one of "TransitionDate" and "TransitionInDays"

StorageClass string | Aws_CF_FunctionString required
TransitionDate string | Aws_CF_FunctionString

The date value in ISO 8601 format. The timezone is always UTC. (YYYY-MM-DDThh:mm:ssZ)

TransitionInDays integer
LoggingConfiguration object
DestinationBucketName string | Aws_CF_FunctionString

The name of an Amazon S3 bucket where Amazon S3 store server access log files. You can store log files in any bucket that you own. By default, logs are stored in the bucket where the LoggingConfiguration property is defined.

LogFilePrefix string | Aws_CF_FunctionString
MetricsConfiguration object
Id string | Aws_CF_FunctionString required
AccessPointArn string | Aws_CF_FunctionString
Prefix string | Aws_CF_FunctionString
TagFilters TagFilter[]
uniqueItems=true
NotificationConfiguration object

Describes the notification configuration for an Amazon S3 bucket.

EventBridgeConfiguration object

Describes the Amazon EventBridge notification configuration for an Amazon S3 bucket.

1 nested properties
EventBridgeEnabled boolean required

Specifies whether to send notifications to Amazon EventBridge when events occur in an Amazon S3 bucket.

Default: "true"
LambdaConfigurations LambdaConfiguration[]
uniqueItems=true
QueueConfigurations QueueConfiguration[]
uniqueItems=true
TopicConfigurations TopicConfiguration[]
uniqueItems=true
EventBridgeConfiguration object

Describes the Amazon EventBridge notification configuration for an Amazon S3 bucket.

EventBridgeEnabled boolean required

Specifies whether to send notifications to Amazon EventBridge when events occur in an Amazon S3 bucket.

Default: "true"
LambdaConfiguration object

Describes the AWS Lambda functions to invoke and the events for which to invoke them.

Event string | Aws_CF_FunctionString required

The Amazon S3 bucket event for which to invoke the AWS Lambda function.

Function string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the AWS Lambda function that Amazon S3 invokes when the specified event type occurs.

Filter object

Specifies object key name filtering rules.

1 nested properties
S3Key object required

A container for object key name prefix and suffix filtering rules.

1 nested properties
Rules FilterRule[] required
uniqueItems=true
QueueConfiguration object

The Amazon Simple Queue Service queues to publish messages to and the events for which to publish messages.

Event string | Aws_CF_FunctionString required

The Amazon S3 bucket event about which you want to publish messages to Amazon SQS.

Queue string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the Amazon SQS queue to which Amazon S3 publishes a message when it detects events of the specified type.

Filter object

Specifies object key name filtering rules.

1 nested properties
S3Key object required

A container for object key name prefix and suffix filtering rules.

1 nested properties
Rules FilterRule[] required
uniqueItems=true
TopicConfiguration object

The topic to which notifications are sent and the events for which notifications are generated.

Event string | Aws_CF_FunctionString required

The Amazon S3 bucket event about which to send notifications.

Topic string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the Amazon SNS topic to which Amazon S3 publishes a message when it detects events of the specified type.

Filter object

Specifies object key name filtering rules.

1 nested properties
S3Key object required

A container for object key name prefix and suffix filtering rules.

1 nested properties
Rules FilterRule[] required
uniqueItems=true
NotificationFilter object

Specifies object key name filtering rules.

S3Key object required

A container for object key name prefix and suffix filtering rules.

1 nested properties
Rules FilterRule[] required
uniqueItems=true
S3KeyFilter object

A container for object key name prefix and suffix filtering rules.

Rules FilterRule[] required
uniqueItems=true
FilterRule object

Specifies the Amazon S3 object key name to filter on and whether to filter on the suffix or prefix of the key name.

Name string | Aws_CF_FunctionString required
Value string | Aws_CF_FunctionString required
ObjectLockConfiguration object
ObjectLockEnabled string | Aws_CF_FunctionString
Rule object

The Object Lock rule in place for the specified object.

1 nested properties
DefaultRetention object

The default retention period that you want to apply to new objects placed in the specified bucket.

3 nested properties
Years integer
Days integer
Mode string | Aws_CF_FunctionString
ObjectLockRule object

The Object Lock rule in place for the specified object.

DefaultRetention object

The default retention period that you want to apply to new objects placed in the specified bucket.

3 nested properties
Years integer
Days integer
Mode string | Aws_CF_FunctionString
DefaultRetention object

The default retention period that you want to apply to new objects placed in the specified bucket.

Years integer
Days integer
Mode string | Aws_CF_FunctionString
OwnershipControls object
Rules OwnershipControlsRule[] required
uniqueItems=true
OwnershipControlsRule object
ObjectOwnership string | Aws_CF_FunctionString

Specifies an object ownership rule.

PublicAccessBlockConfiguration object

Configuration that defines how Amazon S3 handles public access.

BlockPublicAcls boolean

Specifies whether Amazon S3 should block public access control lists (ACLs) for this bucket and objects in this bucket. Setting this element to TRUE causes the following behavior:

  • PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.
  • PUT Object calls fail if the request includes a public ACL. Enabling this setting doesn't affect existing policies or ACLs.
BlockPublicPolicy boolean

Specifies whether Amazon S3 should block public bucket policies for this bucket. Setting this element to TRUE causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access. Enabling this setting doesn't affect existing bucket policies.

IgnorePublicAcls boolean

Specifies whether Amazon S3 should ignore public ACLs for this bucket and objects in this bucket. Setting this element to TRUE causes Amazon S3 to ignore all public ACLs on this bucket and objects in this bucket. Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set.

RestrictPublicBuckets boolean

Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to TRUE restricts access to this bucket to only AWS services and authorized users within this account if the bucket has a public policy. Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked.

ReplicationConfiguration object

A container for replication rules. You can add up to 1,000 rules. The maximum size of a replication configuration is 2 MB.

Role string | Aws_CF_FunctionString required

The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that Amazon S3 assumes when replicating objects.

Rules ReplicationRule[] required

A container for one or more replication rules.

uniqueItems=true
ReplicationRule object

Specifies which Amazon S3 objects to replicate and where to store the replicas.

Destination object required

Specifies which Amazon S3 bucket to store replicated objects in and their storage class.

7 nested properties
Bucket string | Aws_CF_FunctionString required
AccessControlTranslation object

Specify this only in a cross-account scenario (where source and destination bucket owners are not the same), and you want to change replica ownership to the AWS account that owns the destination bucket. If this is not specified in the replication configuration, the replicas are owned by same AWS account that owns the source object.

1 nested properties
Owner string | Aws_CF_FunctionString required
Account string | Aws_CF_FunctionString
EncryptionConfiguration object

Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects.

1 nested properties
ReplicaKmsKeyID string | Aws_CF_FunctionString required

Specifies the ID (Key ARN or Alias ARN) of the customer managed customer master key (CMK) stored in AWS Key Management Service (KMS) for the destination bucket.

Metrics object
2 nested properties
Status string | Aws_CF_FunctionString required
EventThreshold object
ReplicationTime object
2 nested properties
Status string | Aws_CF_FunctionString required
Time object required
StorageClass string | Aws_CF_FunctionString

The storage class to use when replicating objects, such as S3 Standard or reduced redundancy.

Status string | Aws_CF_FunctionString required

Specifies whether the rule is enabled.

DeleteMarkerReplication object
1 nested properties
Status string | Aws_CF_FunctionString
Filter object
3 nested properties
And object
2 nested properties
Prefix string | Aws_CF_FunctionString
TagFilters TagFilter[]
uniqueItems=true
Prefix string | Aws_CF_FunctionString
TagFilter object

Tags to use to identify a subset of objects for an Amazon S3 bucket.

2 nested properties
Value string | Aws_CF_FunctionString required
Key string | Aws_CF_FunctionString required
Id string | Aws_CF_FunctionString

A unique identifier for the rule.

Prefix string | Aws_CF_FunctionString

An object key name prefix that identifies the object or objects to which the rule applies.

Priority integer
SourceSelectionCriteria object

A container that describes additional filters for identifying the source objects that you want to replicate.

2 nested properties
ReplicaModifications object
1 nested properties
Status string | Aws_CF_FunctionString required

Specifies whether Amazon S3 replicates modifications on replicas.

SseKmsEncryptedObjects object

A container for filter information for the selection of S3 objects encrypted with AWS KMS.

1 nested properties
Status string | Aws_CF_FunctionString required

Specifies whether Amazon S3 replicates objects created with server-side encryption using a customer master key (CMK) stored in AWS Key Management Service.

DeleteMarkerReplication object
Status string | Aws_CF_FunctionString
ReplicationDestination object

Specifies which Amazon S3 bucket to store replicated objects in and their storage class.

Bucket string | Aws_CF_FunctionString required
AccessControlTranslation object

Specify this only in a cross-account scenario (where source and destination bucket owners are not the same), and you want to change replica ownership to the AWS account that owns the destination bucket. If this is not specified in the replication configuration, the replicas are owned by same AWS account that owns the source object.

1 nested properties
Owner string | Aws_CF_FunctionString required
Account string | Aws_CF_FunctionString
EncryptionConfiguration object

Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects.

1 nested properties
ReplicaKmsKeyID string | Aws_CF_FunctionString required

Specifies the ID (Key ARN or Alias ARN) of the customer managed customer master key (CMK) stored in AWS Key Management Service (KMS) for the destination bucket.

Metrics object
2 nested properties
Status string | Aws_CF_FunctionString required
EventThreshold object
1 nested properties
Minutes integer required
ReplicationTime object
2 nested properties
Status string | Aws_CF_FunctionString required
Time object required
1 nested properties
Minutes integer required
StorageClass string | Aws_CF_FunctionString

The storage class to use when replicating objects, such as S3 Standard or reduced redundancy.

AccessControlTranslation object

Specify this only in a cross-account scenario (where source and destination bucket owners are not the same), and you want to change replica ownership to the AWS account that owns the destination bucket. If this is not specified in the replication configuration, the replicas are owned by same AWS account that owns the source object.

Owner string | Aws_CF_FunctionString required
EncryptionConfiguration object

Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects.

ReplicaKmsKeyID string | Aws_CF_FunctionString required

Specifies the ID (Key ARN or Alias ARN) of the customer managed customer master key (CMK) stored in AWS Key Management Service (KMS) for the destination bucket.

Metrics object
Status string | Aws_CF_FunctionString required
EventThreshold object
1 nested properties
Minutes integer required
ReplicationTimeValue object
Minutes integer required
ReplicationTime object
Status string | Aws_CF_FunctionString required
Time object required
1 nested properties
Minutes integer required
ReplicationRuleFilter object
And object
2 nested properties
Prefix string | Aws_CF_FunctionString
TagFilters TagFilter[]
uniqueItems=true
Prefix string | Aws_CF_FunctionString
TagFilter object

Tags to use to identify a subset of objects for an Amazon S3 bucket.

2 nested properties
Value string | Aws_CF_FunctionString required
Key string | Aws_CF_FunctionString required
ReplicationRuleAndOperator object
Prefix string | Aws_CF_FunctionString
TagFilters TagFilter[]
uniqueItems=true
SourceSelectionCriteria object

A container that describes additional filters for identifying the source objects that you want to replicate.

ReplicaModifications object
1 nested properties
Status string | Aws_CF_FunctionString required

Specifies whether Amazon S3 replicates modifications on replicas.

SseKmsEncryptedObjects object

A container for filter information for the selection of S3 objects encrypted with AWS KMS.

1 nested properties
Status string | Aws_CF_FunctionString required

Specifies whether Amazon S3 replicates objects created with server-side encryption using a customer master key (CMK) stored in AWS Key Management Service.

ReplicaModifications object
Status string | Aws_CF_FunctionString required

Specifies whether Amazon S3 replicates modifications on replicas.

SseKmsEncryptedObjects object

A container for filter information for the selection of S3 objects encrypted with AWS KMS.

Status string | Aws_CF_FunctionString required

Specifies whether Amazon S3 replicates objects created with server-side encryption using a customer master key (CMK) stored in AWS Key Management Service.

Tag object
Key string | Aws_CF_FunctionString required
Value string | Aws_CF_FunctionString required
VersioningConfiguration object

Describes the versioning state of an Amazon S3 bucket.

Status string | Aws_CF_FunctionString required

The versioning state of the bucket.

WebsiteConfiguration object

Specifies website configuration parameters for an Amazon S3 bucket.

ErrorDocument string | Aws_CF_FunctionString

The name of the error document for the website.

IndexDocument string | Aws_CF_FunctionString

The name of the index document for the website.

RoutingRules RoutingRule[]
RedirectAllRequestsTo object

Specifies the redirect behavior of all requests to a website endpoint of an Amazon S3 bucket.

2 nested properties
HostName string | Aws_CF_FunctionString required

Name of the host where requests are redirected.

Protocol string | Aws_CF_FunctionString

Protocol to use when redirecting requests. The default is the protocol that is used in the original request.

RoutingRule object

Specifies the redirect behavior and when a redirect is applied.

RedirectRule object required

Specifies how requests are redirected. In the event of an error, you can specify a different error code to return.

5 nested properties
HostName string | Aws_CF_FunctionString

The host name to use in the redirect request.

HttpRedirectCode string | Aws_CF_FunctionString

The HTTP redirect code to use on the response. Not required if one of the siblings is present.

Protocol string | Aws_CF_FunctionString

Protocol to use when redirecting requests. The default is the protocol that is used in the original request.

ReplaceKeyPrefixWith string | Aws_CF_FunctionString

The object key prefix to use in the redirect request.

ReplaceKeyWith string | Aws_CF_FunctionString

The specific object key to use in the redirect request.d

RoutingRuleCondition object

A container for describing a condition that must be met for the specified redirect to apply.You must specify at least one of HttpErrorCodeReturnedEquals and KeyPrefixEquals

2 nested properties
KeyPrefixEquals string | Aws_CF_FunctionString

The object key name prefix when the redirect is applied.

HttpErrorCodeReturnedEquals string | Aws_CF_FunctionString

The HTTP error code when the redirect is applied.

RedirectRule object

Specifies how requests are redirected. In the event of an error, you can specify a different error code to return.

HostName string | Aws_CF_FunctionString

The host name to use in the redirect request.

HttpRedirectCode string | Aws_CF_FunctionString

The HTTP redirect code to use on the response. Not required if one of the siblings is present.

Protocol string | Aws_CF_FunctionString

Protocol to use when redirecting requests. The default is the protocol that is used in the original request.

ReplaceKeyPrefixWith string | Aws_CF_FunctionString

The object key prefix to use in the redirect request.

ReplaceKeyWith string | Aws_CF_FunctionString

The specific object key to use in the redirect request.d

RoutingRuleCondition object

A container for describing a condition that must be met for the specified redirect to apply.You must specify at least one of HttpErrorCodeReturnedEquals and KeyPrefixEquals

KeyPrefixEquals string | Aws_CF_FunctionString

The object key name prefix when the redirect is applied.

HttpErrorCodeReturnedEquals string | Aws_CF_FunctionString

The HTTP error code when the redirect is applied.

RedirectAllRequestsTo object

Specifies the redirect behavior of all requests to a website endpoint of an Amazon S3 bucket.

HostName string | Aws_CF_FunctionString required

Name of the host where requests are redirected.

Protocol string | Aws_CF_FunctionString

Protocol to use when redirecting requests. The default is the protocol that is used in the original request.

Arn string | Aws_CF_FunctionString

the Amazon Resource Name (ARN) of the specified bucket.