Merge pull request #33 from JBlack96/Fix-S3-Bucket-PublicACL

[Fix] - Adding S3 Bucket Public ACL Controls
yarbsemaj · Jun 9, 2023 · 8c7eb37 · 8c7eb37
2 parents c4605b6 + 37251af
commit 8c7eb37
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/serverless.yml b/serverless.yml
@@ -64,8 +64,15 @@ resources:
     StaticAssets:
       Type: AWS::S3::Bucket
       Properties:
-        AccessControl: PublicRead
         BucketName: ${self:provider.stage}-${self:service}-static-assets
+        OwnershipControls:
+          Rules:
+            - ObjectOwnership: BucketOwnerPreferred
+        PublicAccessBlockConfiguration:
+          BlockPublicAcls: false
+          BlockPublicPolicy: false
+          IgnorePublicAcls: false
+          RestrictPublicBuckets: false
 
     StaticAssetsS3BucketPolicy:
       Type: AWS::S3::BucketPolicy