S3 MFA-Delete and Object Lock support
See original GitHub issueI don’t see how to enforce MFA Delete and Object Locking in an S3 Bucket.
I can’t find MFA-Delete in CloudFormation, but ObjectLock is:
Type: AWS::S3::Bucket
Properties:
ObjectLockConfiguration:
ObjectLockConfiguration
ObjectLockEnabled: Boolean
Use Case
Define Buckets with MFA-Delete and Object Lock enabled from the start.
Proposed Solution
Add the properties to the S3.Bucket object. Workaround: Doing it manually after creation.
Other
Maybe it already exists, or another workaround exists, and I didn’t find it. Thanks.
This is a 🚀 Feature Request
Issue Analytics
- State:
- Created 4 years ago
- Reactions:9
- Comments:8 (4 by maintainers)
Top Results From Across the Web
Configuring MFA delete - Amazon Simple Storage Service
MFA delete can help prevent accidental bucket deletions by requiring the user who initiates the delete action to prove physical possession of an...
Read more >S3 Bucket MFA Delete Enabled - Trend Micro
Ensure S3 buckets have an MFA-Delete policy to prevent deletion of files without an MFA token.
Read more >How To Enable MFA Delete S3 Bucket Feature - Searce
MFA Delete Feature on S3 Bucket · Create bucket · Provide Bucket name and Region details · Chose Bucket Object Ownership · Block...
Read more >MFA Delete Archives - Jayendra's Cloud Certification Blog
MFA Delete · Additional security can be enabled by configuring a bucket to enable MFA (Multi-Factor Authentication) for the deletion of objects.
Read more >How to Enable MFA Delete on AWS S3 Buckets?
Therefore, protecting data with accidental delete also should be included in the top list of operations. In AWS S3 you can optionally add...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Came across this issue when looking for ways to configure Object Lock. Here’s my workaround that uses escape hatches:
ObjectLockConfiguration
CloudFormation docsOne more parameter overwrite is missing to enable Object Lock (https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_s3.CfnBucketProps.html):