diff --git a/.cfnlintrc b/.cfnlintrc index a8b0f0ee4..e88f438f4 100644 --- a/.cfnlintrc +++ b/.cfnlintrc @@ -15,3 +15,4 @@ include_checks: - I ignore_checks: - W3002 + - W3045 diff --git a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml index af3a5c840..1c9c01579 100644 --- a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml +++ b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml @@ -163,6 +163,7 @@ Resources: DeletionPolicy: Retain UpdateReplacePolicy: Retain Properties: + AccessControl: BucketOwnerFullControl OwnershipControls: Rules: - ObjectOwnership: BucketOwnerEnforced diff --git a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/pipeline_management.yml b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/pipeline_management.yml index e24ab6d90..c10bc943d 100644 --- a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/pipeline_management.yml +++ b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/pipeline_management.yml @@ -1048,6 +1048,7 @@ Resources: DeletionPolicy: Retain UpdateReplacePolicy: Retain Properties: + AccessControl: BucketOwnerFullControl OwnershipControls: Rules: - ObjectOwnership: BucketOwnerEnforced @@ -1075,6 +1076,7 @@ Resources: DeletionPolicy: Retain UpdateReplacePolicy: Retain Properties: + AccessControl: BucketOwnerFullControl OwnershipControls: Rules: - ObjectOwnership: BucketOwnerEnforced diff --git a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/regional.yml b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/regional.yml index 0800bf357..af76f4c62 100644 --- a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/regional.yml +++ b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/regional.yml @@ -23,6 +23,10 @@ Resources: DeletionPolicy: Retain UpdateReplacePolicy: Retain Properties: + AccessControl: BucketOwnerFullControl + OwnershipControls: + Rules: + - ObjectOwnership: BucketOwnerEnforced BucketEncryption: ServerSideEncryptionConfiguration: - ServerSideEncryptionByDefault: diff --git a/src/template.yml b/src/template.yml index 454a2edeb..60e0902ae 100644 --- a/src/template.yml +++ b/src/template.yml @@ -147,10 +147,11 @@ Resources: AWS: !Ref AWS::AccountId BootstrapArtifactStorageBucket: + Type: AWS::S3::Bucket DeletionPolicy: Retain UpdateReplacePolicy: Retain - Type: AWS::S3::Bucket Properties: + AccessControl: BucketOwnerFullControl OwnershipControls: Rules: - ObjectOwnership: BucketOwnerEnforced @@ -171,6 +172,7 @@ Resources: DeletionPolicy: Retain UpdateReplacePolicy: Retain Properties: + AccessControl: BucketOwnerFullControl OwnershipControls: Rules: - ObjectOwnership: BucketOwnerEnforced @@ -688,6 +690,7 @@ Resources: DeletionPolicy: Retain UpdateReplacePolicy: Retain Properties: + AccessControl: BucketOwnerFullControl OwnershipControls: Rules: - ObjectOwnership: BucketOwnerEnforced