fix: do not block public access for buckets with public read access (#70

)
techfromsage · Apr 24, 2023 · 5787c21 · 5787c21
1 parent 75c40b0
commit 5787c21
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/examples/simple-authenticated-api/lib/simple-authenticated-api-stack.ts b/examples/simple-authenticated-api/lib/simple-authenticated-api-stack.ts
@@ -180,6 +180,12 @@ export class SimpleAuthenticatedApiStack extends cdk.Stack {
       `${prefix}simple-authenticated-api-docs`,
       {
         bucketName: `${prefix}simple-authenticated-api-docs`,
+        blockPublicAccess: {
+          blockPublicAcls: false,
+          blockPublicPolicy: false,
+          ignorePublicAcls: false,
+          restrictPublicBuckets: false,
+        },
         publicReadAccess: true,
         removalPolicy: cdk.RemovalPolicy.DESTROY,
         websiteIndexDocument: "index.html",

diff --git a/lib/cdn-site-hosting/cdn-site-hosting-construct.ts b/lib/cdn-site-hosting/cdn-site-hosting-construct.ts
@@ -61,6 +61,12 @@ export class CdnSiteHostingConstruct extends cdk.Construct {
       bucketName: siteDomain,
       websiteIndexDocument: props.websiteIndexDocument,
       websiteErrorDocument,
+      blockPublicAccess: {
+        blockPublicAcls: false,
+        blockPublicPolicy: false,
+        ignorePublicAcls: false,
+        restrictPublicBuckets: false,
+      },
       publicReadAccess: true,
       removalPolicy: props.removalPolicy,
       autoDeleteObjects: props.removalPolicy === cdk.RemovalPolicy.DESTROY,