@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)", date="2022-09-19T20:26:41.795Z") @Stability(value=Stable) public interface IBucket extends software.amazon.jsii.JsiiSerializable, IResource
| Modifier and Type | Interface and Description |
|---|---|
static interface |
IBucket.Jsii$Default
Internal default implementation for
IBucket. |
static class |
IBucket.Jsii$Proxy
A proxy class which represents a concrete javascript instance of this type.
|
| Modifier and Type | Method and Description |
|---|---|
void |
addEventNotification(EventType event,
IBucketNotificationDestination dest,
NotificationKeyFilter... filters)
Adds a bucket notification event destination.
|
void |
addObjectCreatedNotification(IBucketNotificationDestination dest,
NotificationKeyFilter... filters)
Subscribes a destination to receive notifications when an object is created in the bucket.
|
void |
addObjectRemovedNotification(IBucketNotificationDestination dest,
NotificationKeyFilter... filters)
Subscribes a destination to receive notifications when an object is removed from the bucket.
|
AddToResourcePolicyResult |
addToResourcePolicy(PolicyStatement permission)
Adds a statement to the resource policy for a principal (i.e.
|
String |
arnForObjects(String keyPattern)
Returns an ARN that represents all objects within the bucket that match the key pattern specified.
|
void |
enableEventBridgeNotification()
Enables event bridge notification, causing all events below to be sent to EventBridge:.
|
String |
getBucketArn()
The ARN of the bucket.
|
String |
getBucketDomainName()
The IPv4 DNS name of the specified bucket.
|
String |
getBucketDualStackDomainName()
The IPv6 DNS name of the specified bucket.
|
String |
getBucketName()
The name of the bucket.
|
String |
getBucketRegionalDomainName()
The regional domain name of the specified bucket.
|
String |
getBucketWebsiteDomainName()
The Domain name of the static website.
|
String |
getBucketWebsiteUrl()
The URL of the static website.
|
default IKey |
getEncryptionKey()
Optional KMS encryption key associated with this bucket.
|
default Boolean |
getIsWebsite()
If this bucket has been configured for static website hosting.
|
default BucketPolicy |
getPolicy()
The resource policy associated with this bucket.
|
Grant |
grantDelete(IGrantable identity)
Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
|
Grant |
grantDelete(IGrantable identity,
Object objectsKeyPattern)
Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.
|
Grant |
grantPublicAccess(String keyPrefix,
String... allowedActions)
Allows unrestricted access to objects from this bucket.
|
Grant |
grantPut(IGrantable identity)
Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
|
Grant |
grantPut(IGrantable identity,
Object objectsKeyPattern)
Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.
|
Grant |
grantPutAcl(IGrantable identity)
Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
|
Grant |
grantPutAcl(IGrantable identity,
String objectsKeyPattern)
Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.
|
Grant |
grantRead(IGrantable identity)
Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
|
Grant |
grantRead(IGrantable identity,
Object objectsKeyPattern)
Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
|
Grant |
grantReadWrite(IGrantable identity)
Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
|
Grant |
grantReadWrite(IGrantable identity,
Object objectsKeyPattern)
Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).
|
Grant |
grantWrite(IGrantable identity)
Grant write permissions to this bucket to an IAM principal.
|
Grant |
grantWrite(IGrantable identity,
Object objectsKeyPattern)
Grant write permissions to this bucket to an IAM principal.
|
Rule |
onCloudTrailEvent(String id)
Defines a CloudWatch event that triggers when something happens to this bucket.
|
Rule |
onCloudTrailEvent(String id,
OnCloudTrailBucketEventOptions options)
Defines a CloudWatch event that triggers when something happens to this bucket.
|
Rule |
onCloudTrailPutObject(String id)
Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.
|
Rule |
onCloudTrailPutObject(String id,
OnCloudTrailBucketEventOptions options)
Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.
|
Rule |
onCloudTrailWriteObject(String id)
Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.
|
Rule |
onCloudTrailWriteObject(String id,
OnCloudTrailBucketEventOptions options)
Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.
|
String |
s3UrlForObject()
The S3 URL of an S3 object.
|
String |
s3UrlForObject(String key)
The S3 URL of an S3 object.
|
default void |
setPolicy(BucketPolicy value)
The resource policy associated with this bucket.
|
String |
transferAccelerationUrlForObject()
The https Transfer Acceleration URL of an S3 object.
|
String |
transferAccelerationUrlForObject(String key)
The https Transfer Acceleration URL of an S3 object.
|
String |
transferAccelerationUrlForObject(String key,
TransferAccelerationUrlOptions options)
The https Transfer Acceleration URL of an S3 object.
|
String |
urlForObject()
The https URL of an S3 object.
|
String |
urlForObject(String key)
The https URL of an S3 object.
|
String |
virtualHostedUrlForObject()
The virtual hosted-style URL of an S3 object.
|
String |
virtualHostedUrlForObject(String key)
The virtual hosted-style URL of an S3 object.
|
String |
virtualHostedUrlForObject(String key,
VirtualHostedStyleUrlOptions options)
The virtual hosted-style URL of an S3 object.
|
applyRemovalPolicy, getEnv, getStack@Stability(value=Stable) @NotNull String getBucketArn()
@Stability(value=Stable) @NotNull String getBucketDomainName()
@Stability(value=Stable) @NotNull String getBucketDualStackDomainName()
@Stability(value=Stable) @NotNull String getBucketName()
@Stability(value=Stable) @NotNull String getBucketRegionalDomainName()
@Stability(value=Stable) @NotNull String getBucketWebsiteDomainName()
@Stability(value=Stable) @NotNull String getBucketWebsiteUrl()
@Stability(value=Stable) @Nullable default IKey getEncryptionKey()
@Stability(value=Stable) @Nullable default Boolean getIsWebsite()
@Stability(value=Stable) @Nullable default BucketPolicy getPolicy()
If autoCreatePolicy is true, a BucketPolicy will be created upon the
first call to addToResourcePolicy(s).
@Optional
default void setPolicy(@Nullable
BucketPolicy value)
If autoCreatePolicy is true, a BucketPolicy will be created upon the
first call to addToResourcePolicy(s).
@Stability(value=Stable)
void addEventNotification(@NotNull
EventType event,
@NotNull
IBucketNotificationDestination dest,
@NotNull
NotificationKeyFilter... filters)
Example:
// Example automatically generated from non-compiling source. May contain errors.
Function myLambda;
Bucket bucket = new Bucket(this, "MyBucket");
bucket.addEventNotification(EventType.OBJECT_CREATED, new LambdaDestination(myLambda), NotificationKeyFilter.builder().prefix("home/myusername/*").build());
event - The event to trigger the notification. This parameter is required.dest - The notification destination (Lambda, SNS Topic or SQS Queue). This parameter is required.filters - S3 object key filter rules to determine which objects trigger this event. This parameter is required.@Stability(value=Stable)
void addObjectCreatedNotification(@NotNull
IBucketNotificationDestination dest,
@NotNull
NotificationKeyFilter... filters)
This is identical to calling
onEvent(s3.EventType.OBJECT_CREATED).
dest - The notification destination (see onEvent). This parameter is required.filters - Filters (see onEvent). This parameter is required.@Stability(value=Stable)
void addObjectRemovedNotification(@NotNull
IBucketNotificationDestination dest,
@NotNull
NotificationKeyFilter... filters)
This is identical to calling
onEvent(EventType.OBJECT_REMOVED).
dest - The notification destination (see onEvent). This parameter is required.filters - Filters (see onEvent). This parameter is required.@Stability(value=Stable) @NotNull AddToResourcePolicyResult addToResourcePolicy(@NotNull PolicyStatement permission)
Note that the policy statement may or may not be added to the policy.
For example, when an IBucket is created from an existing bucket,
it's not possible to tell whether the bucket already has a policy
attached, let alone to re-use that policy to add more statements to it.
So it's safest to do nothing in these cases.
permission - the policy statement to be added to the bucket's policy. This parameter is required.@Stability(value=Stable) @NotNull String arnForObjects(@NotNull String keyPattern)
To represent all keys, specify "*".
keyPattern - This parameter is required.@Stability(value=Stable) void enableEventBridgeNotification()
@Stability(value=Stable) @NotNull Grant grantDelete(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern)
identity - The principal. This parameter is required.objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').@Stability(value=Stable) @NotNull Grant grantDelete(@NotNull IGrantable identity)
identity - The principal. This parameter is required.@Stability(value=Stable) @NotNull Grant grantPublicAccess(@Nullable String keyPrefix, @NotNull String... allowedActions)
IMPORTANT: This permission allows anyone to perform actions on S3 objects in this bucket, which is useful for when you configure your bucket as a website and want everyone to be able to read objects in the bucket without needing to authenticate.
Without arguments, this method will grant read ("s3:GetObject") access to all objects ("*") in the bucket.
The method returns the iam.Grant object, which can then be modified
as needed. For example, you can add a condition that will restrict access only
to an IPv4 range like this:
const grant = bucket.grantPublicAccess();
grant.resourceStatement!.addCondition(‘IpAddress’, { “aws:SourceIp”: “54.240.143.0/24” });
keyPrefix - the prefix of S3 object keys (e.g. `home/*`). Default is "*".allowedActions - the set of S3 actions to allow. This parameter is required.@Stability(value=Stable) @NotNull Grant grantPut(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern)
If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
identity - The principal. This parameter is required.objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').@Stability(value=Stable) @NotNull Grant grantPut(@NotNull IGrantable identity)
If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
identity - The principal. This parameter is required.@Stability(value=Stable) @NotNull Grant grantPutAcl(@NotNull IGrantable identity, @Nullable String objectsKeyPattern)
If your application has the '@aws-cdk/aws-s3:grantWriteWithoutAcl' feature flag set, calling {@link grantWrite} or {@link grantReadWrite} no longer grants permissions to modify the ACLs of the objects; in this case, if you need to modify object ACLs, call this method explicitly.
identity - The principal. This parameter is required.objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').@Stability(value=Stable) @NotNull Grant grantPutAcl(@NotNull IGrantable identity)
If your application has the '@aws-cdk/aws-s3:grantWriteWithoutAcl' feature flag set, calling {@link grantWrite} or {@link grantReadWrite} no longer grants permissions to modify the ACLs of the objects; in this case, if you need to modify object ACLs, call this method explicitly.
identity - The principal. This parameter is required.@Stability(value=Stable) @NotNull Grant grantRead(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern)
If encryption is used, permission to use the key to decrypt the contents of the bucket will also be granted to the same principal.
identity - The principal. This parameter is required.objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').@Stability(value=Stable) @NotNull Grant grantRead(@NotNull IGrantable identity)
If encryption is used, permission to use the key to decrypt the contents of the bucket will also be granted to the same principal.
identity - The principal. This parameter is required.@Stability(value=Stable) @NotNull Grant grantReadWrite(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern)
If an encryption key is used, permission to use the key for encrypt/decrypt will also be granted.
Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl,
which could be used to grant read/write object access to IAM principals in other accounts.
If you want to get rid of that behavior, update your CDK version to 1.85.0 or later,
and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true
in the context key of your cdk.json file.
If you've already updated, but still need the principal to have permissions to modify the ACLs,
use the {@link grantPutAcl} method.
identity - The principal. This parameter is required.objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').@Stability(value=Stable) @NotNull Grant grantReadWrite(@NotNull IGrantable identity)
If an encryption key is used, permission to use the key for encrypt/decrypt will also be granted.
Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl,
which could be used to grant read/write object access to IAM principals in other accounts.
If you want to get rid of that behavior, update your CDK version to 1.85.0 or later,
and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true
in the context key of your cdk.json file.
If you've already updated, but still need the principal to have permissions to modify the ACLs,
use the {@link grantPutAcl} method.
identity - The principal. This parameter is required.@Stability(value=Stable) @NotNull Grant grantWrite(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern)
If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl,
which could be used to grant read/write object access to IAM principals in other accounts.
If you want to get rid of that behavior, update your CDK version to 1.85.0 or later,
and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true
in the context key of your cdk.json file.
If you've already updated, but still need the principal to have permissions to modify the ACLs,
use the {@link grantPutAcl} method.
identity - The principal. This parameter is required.objectsKeyPattern - Restrict the permission to a certain key pattern (default '*').@Stability(value=Stable) @NotNull Grant grantWrite(@NotNull IGrantable identity)
If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
Before CDK version 1.85.0, this method granted the s3:PutObject* permission that included s3:PutObjectAcl,
which could be used to grant read/write object access to IAM principals in other accounts.
If you want to get rid of that behavior, update your CDK version to 1.85.0 or later,
and make sure the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag is set to true
in the context key of your cdk.json file.
If you've already updated, but still need the principal to have permissions to modify the ACLs,
use the {@link grantPutAcl} method.
identity - The principal. This parameter is required.@Stability(value=Stable) @NotNull Rule onCloudTrailEvent(@NotNull String id, @Nullable OnCloudTrailBucketEventOptions options)
Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
id - The id of the rule. This parameter is required.options - Options for adding the rule.@Stability(value=Stable) @NotNull Rule onCloudTrailEvent(@NotNull String id)
Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
id - The id of the rule. This parameter is required.@Stability(value=Stable) @NotNull Rule onCloudTrailPutObject(@NotNull String id, @Nullable OnCloudTrailBucketEventOptions options)
Note that some tools like aws s3 cp will automatically use either
PutObject or the multipart upload API depending on the file size,
so using onCloudTrailWriteObject may be preferable.
Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
id - The id of the rule. This parameter is required.options - Options for adding the rule.@Stability(value=Stable) @NotNull Rule onCloudTrailPutObject(@NotNull String id)
Note that some tools like aws s3 cp will automatically use either
PutObject or the multipart upload API depending on the file size,
so using onCloudTrailWriteObject may be preferable.
Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
id - The id of the rule. This parameter is required.@Stability(value=Stable) @NotNull Rule onCloudTrailWriteObject(@NotNull String id, @Nullable OnCloudTrailBucketEventOptions options)
This includes the events PutObject, CopyObject, and CompleteMultipartUpload.
Note that some tools like aws s3 cp will automatically use either
PutObject or the multipart upload API depending on the file size,
so using this method may be preferable to onCloudTrailPutObject.
Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
id - The id of the rule. This parameter is required.options - Options for adding the rule.@Stability(value=Stable) @NotNull Rule onCloudTrailWriteObject(@NotNull String id)
This includes the events PutObject, CopyObject, and CompleteMultipartUpload.
Note that some tools like aws s3 cp will automatically use either
PutObject or the multipart upload API depending on the file size,
so using this method may be preferable to onCloudTrailPutObject.
Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
id - The id of the rule. This parameter is required.@Stability(value=Stable) @NotNull String s3UrlForObject(@Nullable String key)
For example:
s3://onlybuckets3://bucket/keykey - The S3 key of the object.@Stability(value=Stable) @NotNull String s3UrlForObject()
For example:
s3://onlybuckets3://bucket/key@Stability(value=Stable) @NotNull String transferAccelerationUrlForObject(@Nullable String key, @Nullable TransferAccelerationUrlOptions options)
Specify dualStack: true at the options
for dual-stack endpoint (connect to the bucket over IPv6). For example:
https://bucket.s3-accelerate.amazonaws.comhttps://bucket.s3-accelerate.amazonaws.com/keykey - The S3 key of the object.options - Options for generating URL.@Stability(value=Stable) @NotNull String transferAccelerationUrlForObject(@Nullable String key)
Specify dualStack: true at the options
for dual-stack endpoint (connect to the bucket over IPv6). For example:
https://bucket.s3-accelerate.amazonaws.comhttps://bucket.s3-accelerate.amazonaws.com/keykey - The S3 key of the object.@Stability(value=Stable) @NotNull String transferAccelerationUrlForObject()
Specify dualStack: true at the options
for dual-stack endpoint (connect to the bucket over IPv6). For example:
https://bucket.s3-accelerate.amazonaws.comhttps://bucket.s3-accelerate.amazonaws.com/key@Stability(value=Stable) @NotNull String urlForObject(@Nullable String key)
https://s3.us-west-1.amazonaws.com/onlybuckethttps://s3.us-west-1.amazonaws.com/bucket/keyhttps://s3.cn-north-1.amazonaws.com.cn/china-bucket/mykeykey - The S3 key of the object.@Stability(value=Stable) @NotNull String urlForObject()
https://s3.us-west-1.amazonaws.com/onlybuckethttps://s3.us-west-1.amazonaws.com/bucket/keyhttps://s3.cn-north-1.amazonaws.com.cn/china-bucket/mykey@Stability(value=Stable) @NotNull String virtualHostedUrlForObject(@Nullable String key, @Nullable VirtualHostedStyleUrlOptions options)
https://only-bucket.s3.us-west-1.amazonaws.comhttps://bucket.s3.us-west-1.amazonaws.com/keyhttps://bucket.s3.amazonaws.com/keyhttps://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykeykey - The S3 key of the object.options - Options for generating URL.@Stability(value=Stable) @NotNull String virtualHostedUrlForObject(@Nullable String key)
https://only-bucket.s3.us-west-1.amazonaws.comhttps://bucket.s3.us-west-1.amazonaws.com/keyhttps://bucket.s3.amazonaws.com/keyhttps://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykeykey - The S3 key of the object.@Stability(value=Stable) @NotNull String virtualHostedUrlForObject()
https://only-bucket.s3.us-west-1.amazonaws.comhttps://bucket.s3.us-west-1.amazonaws.com/keyhttps://bucket.s3.amazonaws.com/keyhttps://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykeyCopyright © 2022. All rights reserved.