Bucket - upbound/provider-aws-s3@v1.14.0

THIS IS A BETA FIELD. It will be honored unless the Management Policies feature flag is disabled. InitProvider holds the same fields as ForProvider, with the exception of Identifier and other resource reference fields. The fields that are in InitProvider are merged into ForProvider when the resource is created. The same fields are also added to the terraform ignore_changes hook, to avoid updating them after creation. This is useful for fields that are required on creation, but we do not desire to update them after creation, for example because of an external controller is managing them, like an autoscaler.

forceDestroy

boolean

objectLockEnabled

boolean

tags

object

managementPolicies

array

THIS IS A BETA FIELD. It is on by default but can be opted out through a Crossplane feature flag. ManagementPolicies specify the array of actions Crossplane is allowed to take on the managed and external resources. This field is planned to replace the DeletionPolicy field in a future release. Currently, both could be set independently and non-default values would be honored if the feature flag is enabled. If both are custom, the DeletionPolicy field will be ignored. See the design doc for more information: https://github.com/crossplane/crossplane/blob/499895a25d1a1a0ba1604944ef98ac7a1a71f197/design/design-doc-observe-only-resources.md?plain=1#L223 and this one: https://github.com/crossplane/crossplane/blob/444267e84783136daa93568b364a5f01228cacbe/design/one-pager-ignore-changes.md

providerConfigRef

object

ProviderConfigReference specifies how the provider that will be used to create, observe, update, and delete this managed resource should be configured.

name

requiredstring

policy

object

Policies for referencing.

resolution

string

resolve

string

publishConnectionDetailsTo

object

PublishConnectionDetailsTo specifies the connection secret config which contains a name, metadata and a reference to secret store config to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource.

configRef

object

SecretStoreConfigRef specifies which secret store config should be used for this ConnectionSecret.

name

requiredstring

policy

object

Policies for referencing.

resolution

string

resolve

string

metadata

object

Metadata is the metadata for connection secret.

object

object

string

requiredstring

writeConnectionSecretToRef

object

WriteConnectionSecretToReference specifies the namespace and name of a Secret to which any connection details for this managed resource should be written. Connection details frequently include the endpoint, username, and password required to connect to the managed resource. This field is planned to be replaced in a future release in favor of PublishConnectionDetailsTo. Currently, both could be set independently and connection details would be published to both without affecting each other.

name

requiredstring

namespace

requiredstring

status

object

BucketStatus defines the observed state of Bucket.

atProvider

object

No description provided.

string

string

string

string

bucketRegionalDomainName

string

corsRule

array

Rule of Cross-Origin Resource Sharing. See CORS rule below for details. Use the resource aws_s3_bucket_cors_configuration instead.

allowedHeaders

array

List of headers allowed.

allowedMethods

array

One or more HTTP methods that you allow the origin to execute. Can be GET, PUT, POST, DELETE or HEAD.

allowedOrigins

array

One or more origins you want customers to be able to access the bucket from.

exposeHeaders

array

One or more headers in the response that you want customers to be able to access from their applications (for example, from a JavaScript XMLHttpRequest object).

maxAgeSeconds

number

forceDestroy

boolean

grant

array

An ACL policy grant. See Grant below for details. Conflicts with acl. Use the resource aws_s3_bucket_acl instead.

string

permissions

array

List of permissions to apply for grantee. Valid values are READ, WRITE, READ_ACP, WRITE_ACP, FULL_CONTROL.

string

string

string

array

Configuration of object lifecycle management. See Lifecycle Rule below for details. Use the resource aws_s3_bucket_lifecycle_configuration instead.

abortIncompleteMultipartUploadDays

number

enabled

boolean

expiration

array

Specifies a period in the object's expire. See Expiration below for details.

date

string

days

number

expiredObjectDeleteMarker

boolean

string

noncurrentVersionExpiration

array

Specifies when noncurrent object versions expire. See Noncurrent Version Expiration below for details.

days

number

noncurrentVersionTransition

array

Specifies when noncurrent object versions transitions. See Noncurrent Version Transition below for details.

number

string

string

object

array

Specifies a period in the object's transitions. See Transition below for details.

string

number

string

array

Configuration of S3 bucket logging parameters. See Logging below for details. Use the resource aws_s3_bucket_logging instead.

targetBucket

string

targetPrefix

string

objectLockConfiguration

array

Configuration of S3 object locking. See Object Lock Configuration below for details. Use the object_lock_enabled parameter and the resource aws_s3_bucket_object_lock_configuration instead.

objectLockEnabled

string

rule

array

Object Lock rule in place for this bucket (documented below).

defaultRetention

array

Default retention period that you want to apply to new objects placed in this bucket (documented below).

number

string

number

boolean

string

string

replicationConfiguration

array

Configuration of replication configuration. See Replication Configuration below for details. Use the resource aws_s3_bucket_replication_configuration instead.

role

string

rules

array

Specifies the rules managing the replication (documented below).

deleteMarkerReplicationStatus

string

destination

array

Specifies the destination for the rule (documented below).

accessControlTranslation

array

Specifies the overrides to use for object owners on replication (documented below). Must be used in conjunction with account_id owner override configuration.

string

string

string

array

Enables replication metrics (documented below).

number

string

string

array

Enables S3 Replication Time Control (S3 RTC) (documented below).

number

string

string

array

Filter that identifies subset of objects to which the replication rule applies (documented below).

prefix

string

tags

object

string

prefix

string

priority

number

sourceSelectionCriteria

array

Specifies special object selection criteria (documented below).

sseKmsEncryptedObjects

array

Match SSE-KMS encrypted objects (documented below). If specified, replica_kms_key_id in destination must be specified as well.

enabled

boolean

status

string

requestPayer

string

serverSideEncryptionConfiguration

array

Configuration of server-side encryption configuration. See Server Side Encryption Configuration below for details. Use the resource aws_s3_bucket_server_side_encryption_configuration instead.

rule

array

Single object for server-side encryption by default configuration. (documented below)

applyServerSideEncryptionByDefault

array

Single object for setting server-side encryption by default. (documented below)

string

string

boolean

object

object

array

Configuration of the S3 bucket versioning state. See Versioning below for details. Use the resource aws_s3_bucket_versioning instead.

enabled

boolean

mfaDelete

boolean

website

array

Configuration of the S3 bucket website. See Website below for details. Use the resource aws_s3_bucket_website_configuration instead.

errorDocument

string

indexDocument

string

redirectAllRequestsTo

string

string

string

string

array

Conditions of the resource.

requiredstring

string

integer

requiredstring

requiredstring

requiredstring

integer

mybucket-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketserversideencryptionconfiguration
  labels:
    testing.upbound.io/example-name: mybucket
  name: mybucket-random
spec:
  forProvider:
    region: us-west-1

random-canned

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketacl-canned
  labels:
    testing.upbound.io/example-name: s3-canned
  name: random-canned
spec:
  forProvider:
    region: us-west-1
    tags:
      Name: SampleBucketCannedAcl

random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  labels:
    testing.upbound.io/example-name: s3
  name: random
spec:
  forProvider:
    objectLockEnabled: true
    region: us-west-1
    tags:
      Name: SampleBucket

random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketpolicy
  labels:
    testing.upbound.io/example-name: s3
  name: random
spec:
  forProvider:
    objectLockEnabled: true
    region: us-west-1
    tags:
      Name: SampleBucket

example-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketlifecycleconfiguration
  labels:
    testing.upbound.io/example-name: s3
  name: example-random
spec:
  forProvider:
    objectLockEnabled: true
    region: us-west-1
    tags:
      Name: SampleBucket

log-bucket-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketlogging
  labels:
    testing.upbound.io/example-name: log_bucket
  name: log-bucket-random
spec:
  forProvider:
    region: us-west-1

random-2

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  labels:
    testing.upbound.io/example-name: s3-2
  name: random-2
spec:
  forProvider:
    region: us-west-1
    tags:
      Name: SampleBucket-2

example-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketlogging
  labels:
    testing.upbound.io/example-name: example
  name: example-random
spec:
  forProvider:
    region: us-west-1

bucket-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketaccelerateconfiguration
  labels:
    testing.upbound.io/example-name: example
  name: bucket-random
spec:
  forProvider:
    region: us-west-1

bucket-notification

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    crossplane.io/external-name: random
    meta.upbound.io/example-id: s3/v1beta1/bucketnotification
  labels:
    testing.upbound.io/example-name: bucket-notification
  name: bucket-notification
spec:
  forProvider:
    region: us-west-1

example-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketpublicaccessblock
  labels:
    testing.upbound.io/example-name: example
  name: example-random
spec:
  forProvider:
    region: us-west-1

example-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/bucketversioning
  labels:
    testing.upbound.io/example-name: example
  name: example-random
spec:
  forProvider:
    region: us-west-1

example-random

apiVersion: s3.aws.upbound.io/v1beta1
kind: Bucket
metadata:
  annotations:
    meta.upbound.io/example-id: s3/v1beta1/object
  labels:
    testing.upbound.io/example-name: s3
  name: example-random
spec:
  forProvider:
    objectLockEnabled: true
    region: us-west-1
    tags:
      Name: SampleBucket

Marketplace

Discover the building blocks for your internal cloud platform.

Solutions

Learn

Company

More