BucketBase (software.amazon.awscdk:aws-cdk-lib 2.42.1 API)

java.lang.Object
- software.amazon.jsii.JsiiObject
- - software.constructs.Construct
  - - software.amazon.awscdk.Resource
    - - software.amazon.awscdk.services.s3.BucketBase

All Implemented Interfaces:

IResource, IBucket, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable

Direct Known Subclasses:

Bucket
```
@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-19T20:26:41.731Z")
 @Stability(value=Stable)
public abstract class BucketBase
extends Resource
implements IBucket
```
Represents an S3 Bucket.
Buckets can be either defined within this stack:
new Bucket(this, 'MyBucket', { props });
Or imported from an existing bucket:
Bucket.import(this, 'MyImportedBucket', { bucketArn: ... });
You can also export a bucket and import it into another stack:
const ref = myBucket.export(); Bucket.import(this, 'MyImportedBucket', ref);

Nested Class Summary
- Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
  software.amazon.jsii.JsiiObject.InitializationMode
- Nested classes/interfaces inherited from interface software.amazon.awscdk.services.s3.IBucket
  IBucket.Jsii$Default

Constructor Summary

Constructors
Modifier	Constructor and Description
`protected`	`BucketBase(software.constructs.Construct scope, String id)`
`protected`	`BucketBase(software.constructs.Construct scope, String id, ResourceProps props)`
`protected`	`BucketBase(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)`
`protected`	`BucketBase(software.amazon.jsii.JsiiObjectRef objRef)`

Method Summary

All Methods Instance Methods Abstract Methods Concrete Methods
Modifier and Type	Method and Description
`void`	`addEventNotification(EventType event, IBucketNotificationDestination dest, NotificationKeyFilter... filters)` Adds a bucket notification event destination.
`void`	`addObjectCreatedNotification(IBucketNotificationDestination dest, NotificationKeyFilter... filters)` Subscribes a destination to receive notifications when an object is created in the bucket.
`void`	`addObjectRemovedNotification(IBucketNotificationDestination dest, NotificationKeyFilter... filters)` Subscribes a destination to receive notifications when an object is removed from the bucket.
`AddToResourcePolicyResult`	`addToResourcePolicy(PolicyStatement permission)` Adds a statement to the resource policy for a principal (i.e.
`String`	`arnForObjects(String keyPattern)` Returns an ARN that represents all objects within the bucket that match the key pattern specified.
`void`	`enableEventBridgeNotification()` Enables event bridge notification, causing all events below to be sent to EventBridge:.
`protected abstract Boolean`	`getAutoCreatePolicy()` Indicates if a bucket resource policy should automatically created upon the first call to `addToResourcePolicy`.
`abstract String`	`getBucketArn()` The ARN of the bucket.
`abstract String`	`getBucketDomainName()` The IPv4 DNS name of the specified bucket.
`abstract String`	`getBucketDualStackDomainName()` The IPv6 DNS name of the specified bucket.
`abstract String`	`getBucketName()` The name of the bucket.
`abstract String`	`getBucketRegionalDomainName()` The regional domain name of the specified bucket.
`abstract String`	`getBucketWebsiteDomainName()` The Domain name of the static website.
`abstract String`	`getBucketWebsiteUrl()` The URL of the static website.
`protected abstract Boolean`	`getDisallowPublicAccess()` Whether to disallow public access.
`abstract IKey`	`getEncryptionKey()` Optional KMS encryption key associated with this bucket.
`abstract Boolean`	`getIsWebsite()` If this bucket has been configured for static website hosting.
`protected IRole`	`getNotificationsHandlerRole()`
`abstract BucketPolicy`	`getPolicy()` The resource policy associated with this bucket.
`Grant`	`grantDelete(IGrantable identity)` Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
`Grant`	`grantDelete(IGrantable identity, Object objectsKeyPattern)` Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
`Grant`	`grantPublicAccess(String keyPrefix, String... allowedActions)` Allows unrestricted access to objects from this bucket.
`Grant`	`grantPut(IGrantable identity)` Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
`Grant`	`grantPut(IGrantable identity, Object objectsKeyPattern)` Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
`Grant`	`grantPutAcl(IGrantable identity)` Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
`Grant`	`grantPutAcl(IGrantable identity, String objectsKeyPattern)` Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
`Grant`	`grantRead(IGrantable identity)` Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
`Grant`	`grantRead(IGrantable identity, Object objectsKeyPattern)` Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
`Grant`	`grantReadWrite(IGrantable identity)` Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
`Grant`	`grantReadWrite(IGrantable identity, Object objectsKeyPattern)` Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
`Grant`	`grantWrite(IGrantable identity)` Grant write permissions to this bucket to an IAM principal.
`Grant`	`grantWrite(IGrantable identity, Object objectsKeyPattern)` Grant write permissions to this bucket to an IAM principal.
`Rule`	`onCloudTrailEvent(String id)` Define a CloudWatch event that triggers when something happens to this repository.
`Rule`	`onCloudTrailEvent(String id, OnCloudTrailBucketEventOptions options)` Define a CloudWatch event that triggers when something happens to this repository.
`Rule`	`onCloudTrailPutObject(String id)` Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.
`Rule`	`onCloudTrailPutObject(String id, OnCloudTrailBucketEventOptions options)` Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.
`Rule`	`onCloudTrailWriteObject(String id)` Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.
`Rule`	`onCloudTrailWriteObject(String id, OnCloudTrailBucketEventOptions options)` Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.
`String`	`s3UrlForObject()` The S3 URL of an S3 object.
`String`	`s3UrlForObject(String key)` The S3 URL of an S3 object.
`protected abstract void`	`setAutoCreatePolicy(Boolean value)` Indicates if a bucket resource policy should automatically created upon the first call to `addToResourcePolicy`.
`protected abstract void`	`setDisallowPublicAccess(Boolean value)` Whether to disallow public access.
`protected void`	`setNotificationsHandlerRole(IRole value)`
`abstract void`	`setPolicy(BucketPolicy value)` The resource policy associated with this bucket.
`String`	`transferAccelerationUrlForObject()` The https Transfer Acceleration URL of an S3 object.
`String`	`transferAccelerationUrlForObject(String key)` The https Transfer Acceleration URL of an S3 object.
`String`	`transferAccelerationUrlForObject(String key, TransferAccelerationUrlOptions options)` The https Transfer Acceleration URL of an S3 object.
`String`	`urlForObject()` The https URL of an S3 object.
`String`	`urlForObject(String key)` The https URL of an S3 object.
`String`	`virtualHostedUrlForObject()` The virtual hosted-style URL of an S3 object.
`String`	`virtualHostedUrlForObject(String key)` The virtual hosted-style URL of an S3 object.
`String`	`virtualHostedUrlForObject(String key, VirtualHostedStyleUrlOptions options)` The virtual hosted-style URL of an S3 object.

Methods inherited from class software.amazon.awscdk.Resource
applyRemovalPolicy, generatePhysicalName, getEnv, getPhysicalName, getResourceArnAttribute, getResourceNameAttribute, getStack, isOwnedResource, isResource

Methods inherited from class software.constructs.Construct
getNode, isConstruct, toString

Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface software.amazon.awscdk.IResource
applyRemovalPolicy, getEnv, getStack

Methods inherited from interface software.constructs.IConstruct
getNode

Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson

- Constructor Detail
  - BucketBase
```
protected BucketBase(software.amazon.jsii.JsiiObjectRef objRef)
```
  - BucketBase
```
protected BucketBase(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
```
  - BucketBase
```
@Stability(value=Stable)
protected BucketBase(@NotNull
                                              software.constructs.Construct scope,
                                              @NotNull
                                              String id,
                                              @Nullable
                                              ResourceProps props)
```
    Parameters:
    
    scope - This parameter is required.
    
    id - This parameter is required.
    
    props -
  - BucketBase
```
@Stability(value=Stable)
protected BucketBase(@NotNull
                                              software.constructs.Construct scope,
                                              @NotNull
                                              String id)
```
    Parameters:
    
    scope - This parameter is required.
    
    id - This parameter is required.
- Method Detail
  - addEventNotification
```
@Stability(value=Stable)
public void addEventNotification(@NotNull
                                                          EventType event,
                                                          @NotNull
                                                          IBucketNotificationDestination dest,
                                                          @NotNull
                                                          NotificationKeyFilter... filters)
```
    Adds a bucket notification event destination.
    Example:
    // Example automatically generated from non-compiling source. May contain errors. Function myLambda; Bucket bucket = new Bucket(this, "MyBucket"); bucket.addEventNotification(EventType.OBJECT_CREATED, new LambdaDestination(myLambda), NotificationKeyFilter.builder().prefix("home/myusername/*").build());
    Specified by:
    
    addEventNotification in interface IBucket
    
    Parameters:
    
    event - The event to trigger the notification. This parameter is required.
    
    dest - The notification destination (Lambda, SNS Topic or SQS Queue). This parameter is required.
    
    filters - S3 object key filter rules to determine which objects trigger this event. This parameter is required.
    
    See Also:
    
    https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
  - addObjectCreatedNotification
```
@Stability(value=Stable)
public void addObjectCreatedNotification(@NotNull
                                                                  IBucketNotificationDestination dest,
                                                                  @NotNull
                                                                  NotificationKeyFilter... filters)
```
    Subscribes a destination to receive notifications when an object is created in the bucket.
    This is identical to calling onEvent(EventType.OBJECT_CREATED).
    
    Specified by:
    
    addObjectCreatedNotification in interface IBucket
    
    Parameters:
    
    dest - The notification destination (see onEvent). This parameter is required.
    
    filters - Filters (see onEvent). This parameter is required.
  - addObjectRemovedNotification
```
@Stability(value=Stable)
public void addObjectRemovedNotification(@NotNull
                                                                  IBucketNotificationDestination dest,
                                                                  @NotNull
                                                                  NotificationKeyFilter... filters)
```
    Subscribes a destination to receive notifications when an object is removed from the bucket.
    This is identical to calling onEvent(EventType.OBJECT_REMOVED).
    
    Specified by:
    
    addObjectRemovedNotification in interface IBucket
    
    Parameters:
    
    dest - The notification destination (see onEvent). This parameter is required.
    
    filters - Filters (see onEvent). This parameter is required.
  - addToResourcePolicy
```
@Stability(value=Stable)
 @NotNull
public AddToResourcePolicyResult addToResourcePolicy(@NotNull
                                                                                        PolicyStatement permission)
```
    Adds a statement to the resource policy for a principal (i.e. account/role/service) to perform actions on this bucket and/or its contents. Use `bucketArn` and `arnForObjects(keys)` to obtain ARNs for this bucket or objects.
    Note that the policy statement may or may not be added to the policy. For example, when an IBucket is created from an existing bucket, it's not possible to tell whether the bucket already has a policy attached, let alone to re-use that policy to add more statements to it. So it's safest to do nothing in these cases.
    
    Specified by:
    
    addToResourcePolicy in interface IBucket
    
    Parameters:
    
    permission - the policy statement to be added to the bucket's policy. This parameter is required.
    
    Returns:
    
    metadata about the execution of this method. If the policy was not added, the value of `statementAdded` will be `false`. You should always check this value to make sure that the operation was actually carried out. Otherwise, synthesis and deploy will terminate silently, which may be confusing.
  - arnForObjects
```
@Stability(value=Stable)
 @NotNull
public String arnForObjects(@NotNull
                                                               String keyPattern)
```
    Returns an ARN that represents all objects within the bucket that match the key pattern specified.
    To represent all keys, specify "*".
    If you need to specify a keyPattern with multiple components, concatenate them into a single string, e.g.:
    arnForObjects(home/${team}/${user}/*)
    
    Specified by:
    
    arnForObjects in interface IBucket
    
    Parameters:
    
    keyPattern - This parameter is required.
  - enableEventBridgeNotification
```
@Stability(value=Stable)
public void enableEventBridgeNotification()
```
    Enables event bridge notification, causing all events below to be sent to EventBridge:.
    - Object Deleted (DeleteObject)
    - Object Deleted (Lifecycle expiration)
    - Object Restore Initiated
    - Object Restore Completed
    - Object Restore Expired
    - Object Storage Class Changed
    - Object Access Tier Changed
    - Object ACL Updated
    - Object Tags Added
    - Object Tags Deleted
    Specified by:
    
    enableEventBridgeNotification in interface IBucket
  - grantDelete
```
@Stability(value=Stable)
 @NotNull
public Grant grantDelete(@NotNull
                                                            IGrantable identity,
                                                            @Nullable
                                                            Object objectsKeyPattern)
```
    Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
    
    Specified by:
    
    grantDelete in interface IBucket
    
    Parameters:
    
    identity - The principal. This parameter is required.
    
    objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').
  - grantDelete
```
@Stability(value=Stable)
 @NotNull
public Grant grantDelete(@NotNull
                                                            IGrantable identity)
```
    Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
    
    Specified by:
    
    grantDelete in interface IBucket
    
    Parameters:
    
    identity - The principal. This parameter is required.
  - grantPublicAccess
```
@Stability(value=Stable)
 @NotNull
public Grant grantPublicAccess(@Nullable
                                                                  String keyPrefix,
                                                                  @NotNull
                                                                  String... allowedActions)
```
    Allows unrestricted access to objects from this bucket.
    IMPORTANT: This permission allows anyone to perform actions on S3 objects in this bucket, which is useful for when you configure your bucket as a website and want everyone to be able to read objects in the bucket without needing to authenticate.
    Without arguments, this method will grant read ("s3:GetObject") access to all objects ("*") in the bucket.
    The method returns the iam.Grant object, which can then be modified as needed. For example, you can add a condition that will restrict access only to an IPv4 range like this:
    const grant = bucket.grantPublicAccess(); grant.resourceStatement!.addCondition(‘IpAddress’, { “aws:SourceIp”: “54.240.143.0/24” });
    Note that if this IBucket refers to an existing bucket, possibly not managed by CloudFormation, this method will have no effect, since it's impossible to modify the policy of an existing bucket.
    Specified by:
    
    grantPublicAccess in interface IBucket
    
    Parameters:
    
    keyPrefix - the prefix of S3 object keys (e.g. `home/*`). Default is "*".
    
    allowedActions - the set of S3 actions to allow. This parameter is required.
    
    Returns:
    
    The `iam.PolicyStatement` object, which can be used to apply e.g. conditions.
  - grantPut
```
@Stability(value=Stable)
 @NotNull
public Grant grantPut(@NotNull
                                                         IGrantable identity,
                                                         @Nullable
                                                         Object objectsKeyPattern)
```
    Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
    If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
    
    Specified by:
    
    grantPut in interface IBucket
    
    Parameters:
    
    identity - The principal. This parameter is required.
    
    objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').
  - grantPut
```
@Stability(value=Stable)
 @NotNull
public Grant grantPut(@NotNull
                                                         IGrantable identity)
```
    Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
    If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
    
    Specified by:
    
    grantPut in interface IBucket
    
    Parameters:
    
    identity - The principal. This parameter is required.
  - grantPutAcl
```
@Stability(value=Stable)
 @NotNull
public Grant grantPutAcl(@NotNull
                                                            IGrantable identity,
                                                            @Nullable
                                                            String objectsKeyPattern)
```
    Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
    If your application has the '@aws-cdk/aws-s3:grantWriteWithoutAcl' feature flag set, calling {@link grantWrite} or {@link grantReadWrite} no longer grants permissions to modify the ACLs of the objects; in this case, if you need to modify object ACLs, call this method explicitly.
    
    Specified by:
    
    grantPutAcl in interface IBucket
    
    Parameters:
    
    identity - This parameter is required.
    
    objectsKeyPattern -
  - grantPutAcl
```
@Stability(value=Stable)
 @NotNull
public Grant grantPutAcl(@NotNull
                                                            IGrantable identity)
```
    Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
    If your application has the '@aws-cdk/aws-s3:grantWriteWithoutAcl' feature flag set, calling {@link grantWrite} or {@link grantReadWrite} no longer grants permissions to modify the ACLs of the objects; in this case, if you need to modify object ACLs, call this method explicitly.
    
    Specified by:
    
    grantPutAcl in interface IBucket
    
    Parameters:
    
    identity - This parameter is required.
  - grantRead
```
@Stability(value=Stable)
 @NotNull
public Grant grantRead(@NotNull
                                                          IGrantable identity,
                                                          @Nullable
                                                          Object objectsKeyPattern)
```
    Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
    If encryption is used, permission to use the key to decrypt the contents of the bucket will also be granted to the same principal.
    
    Specified by:
    
    grantRead in interface IBucket
    
    Parameters:
    
    identity - The principal. This parameter is required.
    
    objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').
  - grantRead
```
@Stability(value=Stable)
 @NotNull
public Grant grantRead(@NotNull
                                                          IGrantable identity)
```
    Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
    If encryption is used, permission to use the key to decrypt the contents of the bucket will also be granted to the same principal.
    
    Specified by:
    
    grantRead in interface IBucket
    
    Parameters:
    
    identity - The principal. This parameter is required.
  - grantReadWrite
```
@Stability(value=Stable)
 @NotNull
public Grant grantReadWrite(@NotNull
                                                               IGrantable identity,
                                                               @Nullable
                                                               Object objectsKeyPattern)
```
    Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
    If an encryption key is used, permission to use the key for encrypt/decrypt will also be granted.
    Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true in the context key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use the {@link grantPutAcl} method.
    
    Specified by:
    
    grantReadWrite in interface IBucket
    
    Parameters:
    
    identity - This parameter is required.
    
    objectsKeyPattern -
  - grantReadWrite
```
@Stability(value=Stable)
 @NotNull
public Grant grantReadWrite(@NotNull
                                                               IGrantable identity)
```
    Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
    If an encryption key is used, permission to use the key for encrypt/decrypt will also be granted.
    Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true in the context key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use the {@link grantPutAcl} method.
    
    Specified by:
    
    grantReadWrite in interface IBucket
    
    Parameters:
    
    identity - This parameter is required.
  - grantWrite
```
@Stability(value=Stable)
 @NotNull
public Grant grantWrite(@NotNull
                                                           IGrantable identity,
                                                           @Nullable
                                                           Object objectsKeyPattern)
```
    Grant write permissions to this bucket to an IAM principal.
    If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
    Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true in the context key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use the {@link grantPutAcl} method.
    
    Specified by:
    
    grantWrite in interface IBucket
    
    Parameters:
    
    identity - This parameter is required.
    
    objectsKeyPattern -
  - grantWrite
```
@Stability(value=Stable)
 @NotNull
public Grant grantWrite(@NotNull
                                                           IGrantable identity)
```
    Grant write permissions to this bucket to an IAM principal.
    If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
    Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true in the context key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use the {@link grantPutAcl} method.
    
    Specified by:
    
    grantWrite in interface IBucket
    
    Parameters:
    
    identity - This parameter is required.
  - onCloudTrailEvent
```
@Stability(value=Stable)
 @NotNull
public Rule onCloudTrailEvent(@NotNull
                                                                 String id,
                                                                 @Nullable
                                                                 OnCloudTrailBucketEventOptions options)
```
    Define a CloudWatch event that triggers when something happens to this repository.
    Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
    
    Specified by:
    
    onCloudTrailEvent in interface IBucket
    
    Parameters:
    
    id - The id of the rule. This parameter is required.
    
    options - Options for adding the rule.
  - onCloudTrailEvent
```
@Stability(value=Stable)
 @NotNull
public Rule onCloudTrailEvent(@NotNull
                                                                 String id)
```
    Define a CloudWatch event that triggers when something happens to this repository.
    Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
    
    Specified by:
    
    onCloudTrailEvent in interface IBucket
    
    Parameters:
    
    id - The id of the rule. This parameter is required.
  - onCloudTrailPutObject
```
@Stability(value=Stable)
 @NotNull
public Rule onCloudTrailPutObject(@NotNull
                                                                     String id,
                                                                     @Nullable
                                                                     OnCloudTrailBucketEventOptions options)
```
    Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.
    Note that some tools like aws s3 cp will automatically use either PutObject or the multipart upload API depending on the file size, so using onCloudTrailWriteObject may be preferable.
    Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
    
    Specified by:
    
    onCloudTrailPutObject in interface IBucket
    
    Parameters:
    
    id - The id of the rule. This parameter is required.
    
    options - Options for adding the rule.
  - onCloudTrailPutObject
```
@Stability(value=Stable)
 @NotNull
public Rule onCloudTrailPutObject(@NotNull
                                                                     String id)
```
    Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.
    Note that some tools like aws s3 cp will automatically use either PutObject or the multipart upload API depending on the file size, so using onCloudTrailWriteObject may be preferable.
    Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
    
    Specified by:
    
    onCloudTrailPutObject in interface IBucket
    
    Parameters:
    
    id - The id of the rule. This parameter is required.
  - onCloudTrailWriteObject
```
@Stability(value=Stable)
 @NotNull
public Rule onCloudTrailWriteObject(@NotNull
                                                                       String id,
                                                                       @Nullable
                                                                       OnCloudTrailBucketEventOptions options)
```
    Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.
    This includes the events PutObject, CopyObject, and CompleteMultipartUpload.
    Note that some tools like aws s3 cp will automatically use either PutObject or the multipart upload API depending on the file size, so using this method may be preferable to onCloudTrailPutObject.
    Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
    
    Specified by:
    
    onCloudTrailWriteObject in interface IBucket
    
    Parameters:
    
    id - The id of the rule. This parameter is required.
    
    options - Options for adding the rule.
  - onCloudTrailWriteObject
```
@Stability(value=Stable)
 @NotNull
public Rule onCloudTrailWriteObject(@NotNull
                                                                       String id)
```
    Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.
    This includes the events PutObject, CopyObject, and CompleteMultipartUpload.
    Note that some tools like aws s3 cp will automatically use either PutObject or the multipart upload API depending on the file size, so using this method may be preferable to onCloudTrailPutObject.
    Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
    
    Specified by:
    
    onCloudTrailWriteObject in interface IBucket
    
    Parameters:
    
    id - The id of the rule. This parameter is required.
  - s3UrlForObject
```
@Stability(value=Stable)
 @NotNull
public String s3UrlForObject(@Nullable
                                                                String key)
```
    The S3 URL of an S3 object. For example:.
    - s3://onlybucket
    - s3://bucket/key
    Specified by:
    
    s3UrlForObject in interface IBucket
    
    Parameters:
    
    key - The S3 key of the object.
    
    Returns:
    
    an ObjectS3Url token
  - s3UrlForObject
```
@Stability(value=Stable)
 @NotNull
public String s3UrlForObject()
```
    The S3 URL of an S3 object. For example:.
    - s3://onlybucket
    - s3://bucket/key
    Specified by:
    
    s3UrlForObject in interface IBucket
    
    Returns:
    
    an ObjectS3Url token
  - transferAccelerationUrlForObject
```
@Stability(value=Stable)
 @NotNull
public String transferAccelerationUrlForObject(@Nullable
                                                                                  String key,
                                                                                  @Nullable
                                                                                  TransferAccelerationUrlOptions options)
```
    The https Transfer Acceleration URL of an S3 object.
    Specify dualStack: true at the options for dual-stack endpoint (connect to the bucket over IPv6). For example:
    - https://bucket.s3-accelerate.amazonaws.com
    - https://bucket.s3-accelerate.amazonaws.com/key
    Specified by:
    
    transferAccelerationUrlForObject in interface IBucket
    
    Parameters:
    
    key - The S3 key of the object.
    
    options - Options for generating URL.
    
    Returns:
    
    an TransferAccelerationUrl token
  - transferAccelerationUrlForObject
```
@Stability(value=Stable)
 @NotNull
public String transferAccelerationUrlForObject(@Nullable
                                                                                  String key)
```
    The https Transfer Acceleration URL of an S3 object.
    Specify dualStack: true at the options for dual-stack endpoint (connect to the bucket over IPv6). For example:
    - https://bucket.s3-accelerate.amazonaws.com
    - https://bucket.s3-accelerate.amazonaws.com/key
    Specified by:
    
    transferAccelerationUrlForObject in interface IBucket
    
    Parameters:
    
    key - The S3 key of the object.
    
    Returns:
    
    an TransferAccelerationUrl token
  - transferAccelerationUrlForObject
```
@Stability(value=Stable)
 @NotNull
public String transferAccelerationUrlForObject()
```
    The https Transfer Acceleration URL of an S3 object.
    Specify dualStack: true at the options for dual-stack endpoint (connect to the bucket over IPv6). For example:
    - https://bucket.s3-accelerate.amazonaws.com
    - https://bucket.s3-accelerate.amazonaws.com/key
    Specified by:
    
    transferAccelerationUrlForObject in interface IBucket
    
    Returns:
    
    an TransferAccelerationUrl token
  - urlForObject
```
@Stability(value=Stable)
 @NotNull
public String urlForObject(@Nullable
                                                              String key)
```
    The https URL of an S3 object. Specify `regional: false` at the options for non-regional URLs. For example:.
    - https://s3.us-west-1.amazonaws.com/onlybucket
    - https://s3.us-west-1.amazonaws.com/bucket/key
    - https://s3.cn-north-1.amazonaws.com.cn/china-bucket/mykey
    Specified by:
    
    urlForObject in interface IBucket
    
    Parameters:
    
    key - The S3 key of the object.
    
    Returns:
    
    an ObjectS3Url token
  - urlForObject
```
@Stability(value=Stable)
 @NotNull
public String urlForObject()
```
    The https URL of an S3 object. Specify `regional: false` at the options for non-regional URLs. For example:.
    - https://s3.us-west-1.amazonaws.com/onlybucket
    - https://s3.us-west-1.amazonaws.com/bucket/key
    - https://s3.cn-north-1.amazonaws.com.cn/china-bucket/mykey
    Specified by:
    
    urlForObject in interface IBucket
    
    Returns:
    
    an ObjectS3Url token
  - virtualHostedUrlForObject
```
@Stability(value=Stable)
 @NotNull
public String virtualHostedUrlForObject(@Nullable
                                                                           String key,
                                                                           @Nullable
                                                                           VirtualHostedStyleUrlOptions options)
```
    The virtual hosted-style URL of an S3 object. Specify `regional: false` at the options for non-regional URL. For example:.
    - https://only-bucket.s3.us-west-1.amazonaws.com
    - https://bucket.s3.us-west-1.amazonaws.com/key
    - https://bucket.s3.amazonaws.com/key
    - https://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykey
    Specified by:
    
    virtualHostedUrlForObject in interface IBucket
    
    Parameters:
    
    key - The S3 key of the object.
    
    options - Options for generating URL.
    
    Returns:
    
    an ObjectS3Url token
  - virtualHostedUrlForObject
```
@Stability(value=Stable)
 @NotNull
public String virtualHostedUrlForObject(@Nullable
                                                                           String key)
```
    The virtual hosted-style URL of an S3 object. Specify `regional: false` at the options for non-regional URL. For example:.
    - https://only-bucket.s3.us-west-1.amazonaws.com
    - https://bucket.s3.us-west-1.amazonaws.com/key
    - https://bucket.s3.amazonaws.com/key
    - https://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykey
    Specified by:
    
    virtualHostedUrlForObject in interface IBucket
    
    Parameters:
    
    key - The S3 key of the object.
    
    Returns:
    
    an ObjectS3Url token
  - virtualHostedUrlForObject
```
@Stability(value=Stable)
 @NotNull
public String virtualHostedUrlForObject()
```
    The virtual hosted-style URL of an S3 object. Specify `regional: false` at the options for non-regional URL. For example:.
    - https://only-bucket.s3.us-west-1.amazonaws.com
    - https://bucket.s3.us-west-1.amazonaws.com/key
    - https://bucket.s3.amazonaws.com/key
    - https://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykey
    Specified by:
    
    virtualHostedUrlForObject in interface IBucket
    
    Returns:
    
    an ObjectS3Url token
  - getBucketArn
```
@Stability(value=Stable)
 @NotNull
public abstract String getBucketArn()
```
    The ARN of the bucket.
    
    Specified by:
    
    getBucketArn in interface IBucket
  - getBucketDomainName
```
@Stability(value=Stable)
 @NotNull
public abstract String getBucketDomainName()
```
    The IPv4 DNS name of the specified bucket.
    
    Specified by:
    
    getBucketDomainName in interface IBucket
  - getBucketDualStackDomainName
```
@Stability(value=Stable)
 @NotNull
public abstract String getBucketDualStackDomainName()
```
    The IPv6 DNS name of the specified bucket.
    
    Specified by:
    
    getBucketDualStackDomainName in interface IBucket
  - getBucketName
```
@Stability(value=Stable)
 @NotNull
public abstract String getBucketName()
```
    The name of the bucket.
    
    Specified by:
    
    getBucketName in interface IBucket
  - getBucketRegionalDomainName
```
@Stability(value=Stable)
 @NotNull
public abstract String getBucketRegionalDomainName()
```
    The regional domain name of the specified bucket.
    
    Specified by:
    
    getBucketRegionalDomainName in interface IBucket
  - getBucketWebsiteDomainName
```
@Stability(value=Stable)
 @NotNull
public abstract String getBucketWebsiteDomainName()
```
    The Domain name of the static website.
    
    Specified by:
    
    getBucketWebsiteDomainName in interface IBucket
  - getBucketWebsiteUrl
```
@Stability(value=Stable)
 @NotNull
public abstract String getBucketWebsiteUrl()
```
    The URL of the static website.
    
    Specified by:
    
    getBucketWebsiteUrl in interface IBucket
  - getEncryptionKey
```
@Stability(value=Stable)
 @Nullable
public abstract IKey getEncryptionKey()
```
    Optional KMS encryption key associated with this bucket.
    
    Specified by:
    
    getEncryptionKey in interface IBucket
  - getIsWebsite
```
@Stability(value=Stable)
 @Nullable
public abstract Boolean getIsWebsite()
```
    If this bucket has been configured for static website hosting.
    
    Specified by:
    
    getIsWebsite in interface IBucket
  - getAutoCreatePolicy
```
@Stability(value=Stable)
 @NotNull
protected abstract Boolean getAutoCreatePolicy()
```
    Indicates if a bucket resource policy should automatically created upon the first call to `addToResourcePolicy`.
  - setAutoCreatePolicy
```
@Stability(value=Stable)
protected abstract void setAutoCreatePolicy(@NotNull
                                                                     Boolean value)
```
    Indicates if a bucket resource policy should automatically created upon the first call to `addToResourcePolicy`.
  - getDisallowPublicAccess
```
@Stability(value=Stable)
 @Nullable
protected abstract Boolean getDisallowPublicAccess()
```
    Whether to disallow public access.
  - setDisallowPublicAccess
```
@Stability(value=Stable)
protected abstract void setDisallowPublicAccess(@Nullable
                                                                         Boolean value)
```
    Whether to disallow public access.
  - getNotificationsHandlerRole
```
@Stability(value=Stable)
 @Nullable
protected IRole getNotificationsHandlerRole()
```
  - setNotificationsHandlerRole
```
@Stability(value=Stable)
protected void setNotificationsHandlerRole(@Nullable
                                                                    IRole value)
```
  - getPolicy
```
@Stability(value=Stable)
 @Nullable
public abstract BucketPolicy getPolicy()
```
    The resource policy associated with this bucket.
    If autoCreatePolicy is true, a BucketPolicy will be created upon the first call to addToResourcePolicy(s).
    
    Specified by:
    
    getPolicy in interface IBucket
  - setPolicy
```
@Stability(value=Stable)
public abstract void setPolicy(@Nullable
                                                        BucketPolicy value)
```
    The resource policy associated with this bucket.
    If autoCreatePolicy is true, a BucketPolicy will be created upon the first call to addToResourcePolicy(s).
    
    Specified by:
    
    setPolicy in interface IBucket

Class BucketBase

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.s3.IBucket

Constructor Summary

Method Summary

Methods inherited from class software.amazon.awscdk.Resource

Methods inherited from class software.constructs.Construct

Methods inherited from class software.amazon.jsii.JsiiObject

Methods inherited from class java.lang.Object

Methods inherited from interface software.amazon.awscdk.IResource

Methods inherited from interface software.constructs.IConstruct

Methods inherited from interface software.amazon.jsii.JsiiSerializable

Constructor Detail

BucketBase

BucketBase

BucketBase

BucketBase

Method Detail

addEventNotification

addObjectCreatedNotification

addObjectRemovedNotification

addToResourcePolicy

arnForObjects

enableEventBridgeNotification

grantDelete

grantDelete

grantPublicAccess

grantPut

grantPut

grantPutAcl

grantPutAcl

grantRead

grantRead

grantReadWrite

grantReadWrite

grantWrite

grantWrite

onCloudTrailEvent

onCloudTrailEvent

onCloudTrailPutObject

onCloudTrailPutObject

onCloudTrailWriteObject

onCloudTrailWriteObject

s3UrlForObject

s3UrlForObject

transferAccelerationUrlForObject

transferAccelerationUrlForObject

transferAccelerationUrlForObject

urlForObject

urlForObject

virtualHostedUrlForObject

virtualHostedUrlForObject

virtualHostedUrlForObject

getBucketArn

getBucketDomainName

getBucketDualStackDomainName

getBucketName

getBucketRegionalDomainName

getBucketWebsiteDomainName

getBucketWebsiteUrl

getEncryptionKey

getIsWebsite

getAutoCreatePolicy

setAutoCreatePolicy

getDisallowPublicAccess

setDisallowPublicAccess

getNotificationsHandlerRole

setNotificationsHandlerRole

getPolicy

setPolicy