aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

CloudFormation reports drift when there is no drift for BucketOwnerPreferred

Open
#1,292 0 comments 1 reaction 0 assignees View on GitHub
bug
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::S3::Bucket

### Resource Name

_No response_

### Issue Description

We have an S3 bucket with the following ownership control in the template:
```
OwnershipControls:
Rules:
- ObjectOwnership: BucketOwnerPreferred
```

Drift detection will tell us the stack is drifted:
Property: OwnershipControls
Change: REMOVE
Expected Value: {"Rules":[{"ObjectOwnership":"BucketOwnerPreferred"}]}
Current Value: -

When we check the s3 bucket we can see that the ObjectOwnership is configured correctly

### Expected Behavior

No drift, drift detection should see:
```
"OwnershipControls": {
"Rules": [
{
"ObjectOwnership": "BucketOwnerPreferred"
}
]
},
```

For the actual resource

### Observed Behavior

CloudFormation reports drift

### Test Cases

Create an S3 bucket using CF with the following setting:
```
OwnershipControls:
Rules:
- ObjectOwnership: BucketOwnerPreferred
```

Check for drift.

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Use the issue's AWS::S3::Bucket template with OwnershipControls set to BucketOwnerPreferred as the reproduction. Run drift detection and compare the reported state with the bucket's actual ownership configuration; done means CloudFormation no longer reports drift for this unchanged resource.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.