aws-amplify / aws-amplify/amplify-cli

Create Amplify resources in acc to Control Tower enforced policies

Open
#13,617 1 comment 0 reactions 0 assignees View on GitHub
feature-request ops-general platform
Dominant language
TypeScript
Stars
2.9k
Forks
825
Avg merge
11d 23h
Merged PRs (30d)
2

Description

### Is this feature request related to a new or existing Amplify category?

New category

### Is this related to another service?

All Categories

### Describe the feature you'd like to request

Amplify Deployed resources to follow Control Tower enforced policies as they are the best recommendations documented by AWS

### Describe the solution you'd like

Amplify to deploy resources in accordance to best practices. For example
AWS Amplify creates a DeploymentBucket with the following characteristics:
- There's no versioning enabled.
- No logging policy is applied.

This discrepancy between AWS's recommended deployment practices with AWS Amplify vs the Control Tower's enforced policies
https://docs.aws.amazon.com/controltower/latest/userguide/s3-rules.html

### Describe alternatives you've considered

And currently, we cannot override the amplify deployment bucket.
FR: https://github.com/aws-amplify/amplify-cli/issues/13591

### Additional context

NA

### Is this something that you'd be interested in working on?

- [ ] 👋 I may be able to implement this feature request

### Would this feature include a breaking change?

- [ ] ⚠️ This feature might incur a breaking change

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.