-
Notifications
You must be signed in to change notification settings - Fork 342
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Add S3 bucket owner enforcement #694
feat: Add S3 bucket owner enforcement #694
Conversation
1a832d6
to
bd4cae8
Compare
b3fc72a
to
aef4591
Compare
- C(BucketOwnerEnforced) - ACLs are disabled and no longer affect access permissions to your | ||
bucket. Requests to set or update ACLs fail. However, requests to read ACLs are supported. | ||
Bucket owner has full ownership and control. Object writer no longer has full ownership and | ||
control. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could you please add something like: C(BucketOwnerEnforced) has been added in amazon.aws version 3.2.0
@@ -0,0 +1,2 @@ | |||
minor_changes: | |||
- s3_bucket - Add support for enforced bucket owner object ownership. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- s3_bucket - Add support for enforced bucket owner object ownership. | |
- s3_bucket - Add support for enforced bucket owner object ownership (https://github.com/ansible-collections/amazon.aws/pull/694). |
Signed-off-by: Alina Buzachis <[email protected]>
Backport to stable-3: 💚 backport PR created✅ Backport PR branch: Backported as #735 🤖 @patchback |
feat: Add S3 bucket owner enforcement SUMMARY AWS finally supports the ability to enforce object ownership such that the owner of the bucket owns all objects. This adds support for that. ISSUE TYPE Feature Pull Request COMPONENT NAME s3_bucket ADDITIONAL INFORMATION --- - hosts: localhost tasks: - s3_bucket: name: tyler-test-123 state: present - s3_bucket: name: tyler-test-123 object_ownership: BucketOwnerEnforced state: present - s3_bucket: name: tyler-test-123 state: absent - s3_bucket: name: tyler-test-123 object_ownership: BucketOwnerEnforced state: present - s3_bucket: name: tyler-test-123 state: absent Reviewed-by: Alina Buzachis <None> Reviewed-by: Markus Bergholz <[email protected]> (cherry picked from commit 7cf0e50)
[PR #694/7cf0e505 backport][stable-3] feat: Add S3 bucket owner enforcement This is a backport of PR #694 as merged into main (7cf0e50). SUMMARY AWS finally supports the ability to enforce object ownership such that the owner of the bucket owns all objects. This adds support for that. ISSUE TYPE Feature Pull Request COMPONENT NAME s3_bucket ADDITIONAL INFORMATION --- - hosts: localhost tasks: - s3_bucket: name: tyler-test-123 state: present - s3_bucket: name: tyler-test-123 object_ownership: BucketOwnerEnforced state: present - s3_bucket: name: tyler-test-123 state: absent - s3_bucket: name: tyler-test-123 object_ownership: BucketOwnerEnforced state: present - s3_bucket: name: tyler-test-123 state: absent
…s3_sync-integration-test s3_sync: Integration test fix: empty buckets before deleting SUMMARY Added tasks to empty buckets before deleting them. S3 requires a bucket to be empty before it can be deleted. The integration tests in the s3_sync try to delete the buckets without emptying them. Fixes ansible-collections#694. ISSUE TYPE Bugfix Pull Request COMPONENT NAME tests/integration/targets/s3_sync Reviewed-by: Markus Bergholz <[email protected]> Reviewed-by: Jill R <None> Reviewed-by: None <None>
SUMMARY
AWS finally supports the ability to enforce object ownership such that the owner of the bucket owns all objects. This adds support for that.
ISSUE TYPE
COMPONENT NAME
s3_bucket
ADDITIONAL INFORMATION