fix: updated logging bucket ACL settings in CDK to handle log deliver…

…y from CloudFront
aws-samples · Oct 30, 2024 · 3537d0a · 3537d0a
1 parent e7963d8
commit 3537d0a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/index.ts b/lib/index.ts
@@ -7,7 +7,7 @@
 import { type IIdentityPool } from '@aws-cdk/aws-cognito-identitypool-alpha';
 import { Stack } from 'aws-cdk-lib';
 import { type IUserPool, type IUserPoolClient } from 'aws-cdk-lib/aws-cognito';
-import { Bucket, BucketEncryption } from 'aws-cdk-lib/aws-s3';
+import { Bucket, BucketAccessControl, BucketEncryption } from 'aws-cdk-lib/aws-s3';
 import { type Construct } from 'constructs';
 import { API } from './api';
 import { Authentication } from './authentication';
@@ -40,6 +40,7 @@ export class GenAINewsletter extends Stack {
     const loggingBucket = new Bucket(this, 'GenAINewsletter-LoggingBucket', {
       encryption: BucketEncryption.S3_MANAGED,
       enforceSSL: true,
+      accessControl: BucketAccessControl.LOG_DELIVERY_WRITE,
     });
 
     const authentication = new Authentication(this, 'AuthenticationStack');