feat: Set object ownership to support CloudFront logs. (#4)

codeforamerica · Oct 17, 2024 · c0da8f6 · c0da8f6
1 parent f6c220c
commit c0da8f6
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -11,6 +11,16 @@ resource "aws_s3_bucket" "logs" {
   tags = var.tags
 }
 
+resource "aws_s3_bucket_ownership_controls" "example" {
+  bucket = aws_s3_bucket.logs.id
+
+  rule {
+    # This is necessary for certain AWS services to write to the bucket,
+    # including CloudFront
+    object_ownership = "ObjectWriter"
+  }
+}
+
 resource "aws_s3_bucket_public_access_block" "good_example" {
   bucket                  = aws_s3_bucket.logs.id
   block_public_acls       = true