aws / aws/aws-cdk

S3 MFA-Delete and Object Lock support

Open
#5,247 9 comments 14 reactions 0 assignees View on GitHub
@aws-cdk/aws-s3 effort/medium feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

I don't see how to enforce MFA Delete and Object Locking in an S3 Bucket.

I can't find MFA-Delete in CloudFormation, but ObjectLock is:

```
Type: AWS::S3::Bucket
Properties:
ObjectLockConfiguration:
ObjectLockConfiguration
ObjectLockEnabled: Boolean

```

### Use Case

Define Buckets with MFA-Delete and Object Lock enabled from the start.

### Proposed Solution

Add the properties to the S3.Bucket object.
Workaround: Doing it manually after creation.

### Other

Maybe it already exists, or another workaround exists, and I didn't find it. Thanks.

---

This is a :rocket: Feature Request

Contributor guide

Open the contributing guide

Research direction

Start with the S3.Bucket object and the CloudFormation properties shown in the issue, checking how existing ObjectLock support is represented. Done means buckets can be defined with MFA-Delete and Object Lock enabled from creation, without the manual workaround described.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.