Skip to content

Recommend Object Ownership be set to Bucket owner preferred #33

Closed
ashle001 opened this issue Jan 14, 2022 · 1 comment
Closed

Recommend Object Ownership be set to Bucket owner preferred #33

ashle001 opened this issue Jan 14, 2022 · 1 comment

Comments

@ashle001
Copy link
Contributor

This setting ensure that objects written to s3 acquire the ownership of the destination (this) account by default. This setting can be used in conjunction with the following enforcement policy to ensure that object ownership of objects written to the bucket from an external account is transferred to the destination bucket account by requiring that the -acl be set to bucket-owner-full-control:
"Action": "s3:PutObject",
"Resource": [
"arn:aws-us-gov:s3:::bucket_name/*",
"arn:aws-us-gov:s3:::bucket_name"
],
"Condition": {
"StringEquals": {
"s3:x-amz-acl": "bucket-owner-full-control"
}
}

@badra001
Copy link
Contributor

Resolved in release 2.4.0 (69772c6)

Sign in to join this conversation on GitHub.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants