Skip to content

Enhancement: include expected_bucket_owner #226

@houserx-jmcc

Description

@houserx-jmcc

Describe the Feature

From AWS docs:

Because Amazon S3 identifies buckets based on their names, an application that uses an incorrect bucket name in a request could inadvertently perform operations against a different bucket than expected. To help avoid unintentional bucket interactions in situations like this, you can use bucket owner condition. Bucket owner condition enables you to verify that the target bucket is owned by the expected AWS account, providing an additional layer of assurance that your S3 operations are having the effects you intend.

Expected Behavior

The config for aws_s3_bucket_server_side_encryption_configuration includes the ability to specify expected_bucket_owner.

Use Case

See docs quote above, recommended AWS best practice to ensure the correct bucket/account is being accessed.

Describe Ideal Solution

This is surfaced via a variable or automatically set based on the account context if available.

Alternatives Considered

No response

Additional Context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions