aws-amplify / aws-amplify/amplify-cli

Request that S3 buckets created by the CLI are PublicAccessBlockConfiguration by default

Open
#12,261 0 comments 0 reactions 0 assignees View on GitHub
feature-request p4 platform
Dominant language
TypeScript
Stars
2.9k
Forks
825
Avg merge
11d 23h
Merged PRs (30d)
2

Description

### Is this feature request related to a new or existing Amplify category?

storage

### Is this related to another service?

S3

### Describe the feature you'd like to request

According to [public documentation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html), S3 buckets will be created with Block Public Access settings enabled.

It would be in line with this change if CLI also ensured that the DeploymentBucket created by the Root Stack of the Amplify CLI was blocked from public access by default.

### Describe the solution you'd like

Bucket could be created something like:

```
{
"Resources": {
"DeploymentBucket": {
"Type": "AWS::S3::Bucket",
"Properties": {
"BlockPublicAccessConfiguration": {
"BlockPublicAcls": true,
"BlockPublicPolicy": true,
"IgnorePublicAcls": true,
"RestrictPublicBuckets": true
},
},
},
}
```

### Describe alternatives you've considered

None

### Additional context

_No response_

### Is this something that you'd be interested in working on?

- [ ] 👋 I may be able to implement this feature request

### Would this feature include a breaking change?

- [X] ⚠️ This feature might incur a breaking change

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.