SAM无法识别PublicAccessBlockConfiguration

时间:2019-02-01 20:50:00

标签: amazon-cloudformation aws-sam

在SAM中生成lambda时,我将其与s3存储桶上的事件(对象创建)相关联。

MYLAMBDAProxy:
    Type: AWS::Serverless::Function
    Properties:
      FunctionName: 'MYLambdaProxy'
      CodeUri: lambda/src
      Handler: index.handler
      Timeout: 10
      Runtime: nodejs8.10
      Environment:
        Variables:
          REGION: us-east-1
      Description: Test lambda
      MemorySize: 256
      Events:
        BucketEvent1:
          Type: S3
          Properties:
            Bucket: !Ref Mys3PrivateBucket
            Events: s3:ObjectCreated:*
            Filter:
              S3Key:
                Rules:
                  - Name: suffix
                    Value: .csv

在标准CF模板(不是SAM模板)中,我可以按以下方式定义s3存储桶:

  Mys3PrivateBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: "my-private-bucket"  
      BucketEncryption: 
        ServerSideEncryptionConfiguration: 
        - ServerSideEncryptionByDefault:
            SSEAlgorithm: AES256
      PublicAccessBlockConfiguration:
          BlockPublicAcls : true
          BlockPublicPolicy : true
          IgnorePublicAcls : true
          RestrictPublicBuckets : true

但是,当我尝试在SAM模板中使用此代码时,出现模板错误,指出无法识别/不支持PublicAccessBlockConfiguration。

在SAM模板中是否有解决此问题的方法?

0 个答案:

没有答案