Make PublicAccessBlockConfiguration optional for cdk bootstrap

We would like to deploy the cdk bootstrap stack without the PublicAccessBlockConfiguration property.

Use Case

Setting this property is restricted in our organization account.

Proposed Solution

Possible solution:

cdk bootstrap --without-public-access-block-configuration

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[bruce-igaw]

@eladb, my company did not give s3 put permission to our organization access key for security reasons. “–without-public-access-block-configuration” it would be nice solution.

[abelmokadem]

@hoegertn it is not that the bucket is public, these rules are managed on the account level and we only have limited access to what we can do within the account. Part of our permission boundary is that we can’t perform s3:PutPublicAccessBlock which means that the cdk bootstrap stack fails with the following error:

API: s3:PutPublicAccessBlock Access Denied