fix: explicitly set log bucket object ownership (#1209)

awslabs · Apr 19, 2023 · 9227c06 · 9227c06
1 parent cb2ce46
commit 9227c06
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/lib/stack.ts b/src/lib/stack.ts
@@ -3,7 +3,7 @@ import { RemovalPolicy, Stack, StackProps, Duration, CfnParameter, CfnOutput, Cf
 import { GatewayVpcEndpointAwsService, Vpc, FlowLogDestination, SubnetType, IVpc, SecurityGroup } from 'aws-cdk-lib/aws-ec2';
 import { Role, ServicePrincipal } from 'aws-cdk-lib/aws-iam';
 import { CfnDBInstance } from 'aws-cdk-lib/aws-neptune';
-import { Bucket, BucketEncryption, IBucket } from 'aws-cdk-lib/aws-s3';
+import { Bucket, BucketEncryption, IBucket, ObjectOwnership } from 'aws-cdk-lib/aws-s3';
 import { Queue, QueueEncryption } from 'aws-cdk-lib/aws-sqs';
 import { Construct } from 'constructs';
 import { TransactionDashboardStack } from './dashboard-stack';
@@ -19,6 +19,7 @@ export class FraudDetectionStack extends Stack {
       encryption: BucketEncryption.S3_MANAGED,
       removalPolicy: RemovalPolicy.RETAIN,
       serverAccessLogsPrefix: 'accessLogBucketAccessLog',
+      objectOwnership: ObjectOwnership.OBJECT_WRITER,
     });
 
     const vpcId = this.node.tryGetContext('vpcId');