Object Ownership doesn't allow Value BucketOwnerEnforced

cfn-lint version: 0.56.3

When linting a CF temptate containing a bucket with bucket ownership set to ObjectOwnership: BucketOwnerEnforced linking fails with the error E3030 You must specify a valid value for ObjectOwnership (BucketOwnerEnforced). Valid values are ["ObjectWriter", "BucketOwnerPreferred"] however Cloudformation allows the value BucketOwnerEnforced per the documentation

sample template

  LogBucket:
    Type: AWS::S3::Bucket
    Properties:
      PublicAccessBlockConfiguration:
        BlockPublicAcls: True
        IgnorePublicAcls: True
        BlockPublicPolicy: True
        RestrictPublicBuckets: True
      BucketEncryption:
        ServerSideEncryptionConfiguration:
          - BucketKeyEnabled: true
      OwnershipControls:
        Rules:
          - ObjectOwnership: BucketOwnerEnforced

Cfn-lint uses the CloudFormation Resource Specifications as the base to do validation. These files are included as part of the application version. Please update to the latest version of cfn-lint or update the spec files manually (cfn-lint -u)

[kddejong]

This is coming from the definition in the public registry. I’m looking into why there is a mix match between documentation and the resource schema definition.

"OwnershipControlsRule": {
            "type": "object",
            "additionalProperties": false,
            "properties": {
                "ObjectOwnership": {
                    "description": "Specifies an object ownership rule.",
                    "type": "string",
                    "enum": [
                        "ObjectWriter",
                        "BucketOwnerPreferred"
                    ]
                }
            }
        },

[kddejong]

I’m waiting on an issue in the spec to be resolved before I can get this merged. Should be resolved this week.