Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Constructs with S3 Buckets fail to deploy in us-east-2 (CMH) #948

Closed
biffgaut opened this issue Apr 13, 2023 · 1 comment
Closed

Constructs with S3 Buckets fail to deploy in us-east-2 (CMH) #948

biffgaut opened this issue Apr 13, 2023 · 1 comment
Labels
bug Something isn't working needs-triage The issue or PR still needs to be triaged

Comments

@biffgaut
Copy link
Contributor

AWS is deploying updates to S3 that include disabling ACLs by default (described here). This has been rolled out in us-east-2 already and is causing several Solutions Constructs to break when deployed in a new stack. The issue is that access logging (enabled by default in Solutions Constructs) uses ACLs to grant the logging service access to the logging bucket. This change will continue to be rolled out to other regions soon.

We are currently updating Solutions Constructs using S3 to grant access for logging using bucket policies instead of ACLs, as well as testing for other situations where ACLs are used. In the meantime, you can add the following feature flag to your cdk.json file to address the issue:

{
  "context": {
    "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true
  }
}

There is no ETA on the Solutions Constructs fix to address this issue at this time, but it is a high priority for us.

Reproduction Steps

Error Log

Environment

  • CDK CLI Version :
  • CDK Framework Version:
  • AWS Solutions Constructs Version :
  • OS :
  • Language :

Other


This is 🐛 Bug Report

@biffgaut biffgaut added bug Something isn't working needs-triage The issue or PR still needs to be triaged labels Apr 13, 2023
@biffgaut
Copy link
Contributor Author

This has been addressed in v2.38.0 (PR #949)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working needs-triage The issue or PR still needs to be triaged
Projects
None yet
Development

No branches or pull requests

1 participant