aws-amplify / aws-amplify/amplify-cli
Request that S3 buckets created by the CLI are PublicAccessBlockConfiguration by default
- Dominant language
- TypeScript
- Stars
- 2.9k
- Forks
- 825
- Avg merge
- 11d 23h
- Merged PRs (30d)
- 2
Description
### Is this feature request related to a new or existing Amplify category?
storage
### Is this related to another service?
S3
### Describe the feature you'd like to request
According to [public documentation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html), S3 buckets will be created with Block Public Access settings enabled.
It would be in line with this change if CLI also ensured that the DeploymentBucket created by the Root Stack of the Amplify CLI was blocked from public access by default.
### Describe the solution you'd like
Bucket could be created something like:
```
{
"Resources": {
"DeploymentBucket": {
"Type": "AWS::S3::Bucket",
"Properties": {
"BlockPublicAccessConfiguration": {
"BlockPublicAcls": true,
"BlockPublicPolicy": true,
"IgnorePublicAcls": true,
"RestrictPublicBuckets": true
},
},
},
}
```
### Describe alternatives you've considered
None
### Additional context
_No response_
### Is this something that you'd be interested in working on?
- [ ] 👋 I may be able to implement this feature request
### Would this feature include a breaking change?
- [X] ⚠️ This feature might incur a breaking change
Contributor guide
Assessment
This issue has not been assessed yet.