在SAM中生成lambda时,我将其与s3存储桶上的事件(对象创建)相关联。
MYLAMBDAProxy:
Type: AWS::Serverless::Function
Properties:
FunctionName: 'MYLambdaProxy'
CodeUri: lambda/src
Handler: index.handler
Timeout: 10
Runtime: nodejs8.10
Environment:
Variables:
REGION: us-east-1
Description: Test lambda
MemorySize: 256
Events:
BucketEvent1:
Type: S3
Properties:
Bucket: !Ref Mys3PrivateBucket
Events: s3:ObjectCreated:*
Filter:
S3Key:
Rules:
- Name: suffix
Value: .csv
在标准CF模板(不是SAM模板)中,我可以按以下方式定义s3存储桶:
Mys3PrivateBucket:
Type: AWS::S3::Bucket
Properties:
BucketName: "my-private-bucket"
BucketEncryption:
ServerSideEncryptionConfiguration:
- ServerSideEncryptionByDefault:
SSEAlgorithm: AES256
PublicAccessBlockConfiguration:
BlockPublicAcls : true
BlockPublicPolicy : true
IgnorePublicAcls : true
RestrictPublicBuckets : true
但是,当我尝试在SAM模板中使用此代码时,出现模板错误,指出无法识别/不支持PublicAccessBlockConfiguration。
在SAM模板中是否有解决此问题的方法?