@aws-solutions-constructs/aws-cloudfront-oai-s3 2.85.0 → 2.85.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/.jsii +5 -5
  2. package/lib/index.js +1 -1
  3. package/package.json +8 -8
  4. package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/cdk.out +1 -1
  5. package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.assets.json +5 -3
  6. package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.template.json +3 -0
  7. package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/cftoais3bucketencryptedwithmanagedkeyprovidedasexistingbucketIntegDefaultTestDeployAssert105E804F.assets.json +2 -1
  8. package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/integ.json +3 -2
  9. package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/manifest.json +4 -3
  10. package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/tree.json +1 -1214
  11. package/test/integ.cftoais3-custom-headers.js.snapshot/cdk.out +1 -1
  12. package/test/integ.cftoais3-custom-headers.js.snapshot/cftoais3-custom-headers.assets.json +5 -3
  13. package/test/integ.cftoais3-custom-headers.js.snapshot/cftoais3-custom-headers.template.json +3 -0
  14. package/test/integ.cftoais3-custom-headers.js.snapshot/cftoais3customheadersIntegDefaultTestDeployAssert5AA11BA9.assets.json +2 -1
  15. package/test/integ.cftoais3-custom-headers.js.snapshot/integ.json +3 -2
  16. package/test/integ.cftoais3-custom-headers.js.snapshot/manifest.json +4 -3
  17. package/test/integ.cftoais3-custom-headers.js.snapshot/tree.json +1 -1322
  18. package/test/integ.cftoais3-custom-originPath.js.snapshot/cdk.out +1 -1
  19. package/test/integ.cftoais3-custom-originPath.js.snapshot/cftoais3-custom-originPath.assets.json +5 -3
  20. package/test/integ.cftoais3-custom-originPath.js.snapshot/cftoais3-custom-originPath.template.json +3 -0
  21. package/test/integ.cftoais3-custom-originPath.js.snapshot/cftoais3customoriginPathIntegDefaultTestDeployAssert1C351914.assets.json +2 -1
  22. package/test/integ.cftoais3-custom-originPath.js.snapshot/integ.json +3 -2
  23. package/test/integ.cftoais3-custom-originPath.js.snapshot/manifest.json +4 -3
  24. package/test/integ.cftoais3-custom-originPath.js.snapshot/tree.json +1 -1268
  25. package/test/integ.cftoais3-customLoggingBuckets.js.snapshot/cdk.out +1 -1
  26. package/test/integ.cftoais3-customLoggingBuckets.js.snapshot/cftoais3-customLoggingBuckets.assets.json +5 -3
  27. package/test/integ.cftoais3-customLoggingBuckets.js.snapshot/cftoais3-customLoggingBuckets.template.json +3 -0
  28. package/test/integ.cftoais3-customLoggingBuckets.js.snapshot/cftoais3customLoggingBucketsIntegDefaultTestDeployAssert8F33EF2A.assets.json +2 -1
  29. package/test/integ.cftoais3-customLoggingBuckets.js.snapshot/integ.json +3 -2
  30. package/test/integ.cftoais3-customLoggingBuckets.js.snapshot/manifest.json +4 -3
  31. package/test/integ.cftoais3-customLoggingBuckets.js.snapshot/tree.json +1 -1325
  32. package/test/integ.cftoais3-existing-bucket.js.snapshot/cdk.out +1 -1
  33. package/test/integ.cftoais3-existing-bucket.js.snapshot/cftoais3-existing-bucket.assets.json +5 -3
  34. package/test/integ.cftoais3-existing-bucket.js.snapshot/cftoais3-existing-bucket.template.json +3 -0
  35. package/test/integ.cftoais3-existing-bucket.js.snapshot/cftoais3existingbucketIntegDefaultTestDeployAssertB7627F26.assets.json +2 -1
  36. package/test/integ.cftoais3-existing-bucket.js.snapshot/integ.json +3 -2
  37. package/test/integ.cftoais3-existing-bucket.js.snapshot/manifest.json +4 -3
  38. package/test/integ.cftoais3-existing-bucket.js.snapshot/tree.json +1 -1357
  39. package/test/integ.cftoais3-no-arguments.js.snapshot/cdk.out +1 -1
  40. package/test/integ.cftoais3-no-arguments.js.snapshot/cftoais3-no-arguments.assets.json +5 -3
  41. package/test/integ.cftoais3-no-arguments.js.snapshot/cftoais3-no-arguments.template.json +3 -0
  42. package/test/integ.cftoais3-no-arguments.js.snapshot/cftoais3noargumentsIntegDefaultTestDeployAssert5CF03E3D.assets.json +2 -1
  43. package/test/integ.cftoais3-no-arguments.js.snapshot/integ.json +3 -2
  44. package/test/integ.cftoais3-no-arguments.js.snapshot/manifest.json +4 -3
  45. package/test/integ.cftoais3-no-arguments.js.snapshot/tree.json +1 -1267
  46. package/test/integ.cftoais3-no-cloudfront-s3-access-logs.js.snapshot/cdk.out +1 -1
  47. package/test/integ.cftoais3-no-cloudfront-s3-access-logs.js.snapshot/cftoais3-no-cloudfront-s3-access-logs.assets.json +5 -3
  48. package/test/integ.cftoais3-no-cloudfront-s3-access-logs.js.snapshot/cftoais3-no-cloudfront-s3-access-logs.template.json +3 -0
  49. package/test/integ.cftoais3-no-cloudfront-s3-access-logs.js.snapshot/cftoais3nocloudfronts3accesslogsIntegDefaultTestDeployAssert6D810275.assets.json +2 -1
  50. package/test/integ.cftoais3-no-cloudfront-s3-access-logs.js.snapshot/integ.json +3 -2
  51. package/test/integ.cftoais3-no-cloudfront-s3-access-logs.js.snapshot/manifest.json +4 -3
  52. package/test/integ.cftoais3-no-cloudfront-s3-access-logs.js.snapshot/tree.json +1 -809
  53. package/test/integ.cftoais3-no-logging.js.snapshot/cdk.out +1 -1
  54. package/test/integ.cftoais3-no-logging.js.snapshot/cftoais3-no-logging.assets.json +5 -3
  55. package/test/integ.cftoais3-no-logging.js.snapshot/cftoais3-no-logging.template.json +3 -0
  56. package/test/integ.cftoais3-no-logging.js.snapshot/cftoais3nologgingIntegDefaultTestDeployAssertCED06EE4.assets.json +2 -1
  57. package/test/integ.cftoais3-no-logging.js.snapshot/integ.json +3 -2
  58. package/test/integ.cftoais3-no-logging.js.snapshot/manifest.json +4 -3
  59. package/test/integ.cftoais3-no-logging.js.snapshot/tree.json +1 -606
  60. package/test/integ.cftoais3-no-security-headers.js.snapshot/cdk.out +1 -1
  61. package/test/integ.cftoais3-no-security-headers.js.snapshot/cftoais3-no-security-headers.assets.json +5 -3
  62. package/test/integ.cftoais3-no-security-headers.js.snapshot/cftoais3-no-security-headers.template.json +3 -0
  63. package/test/integ.cftoais3-no-security-headers.js.snapshot/cftoais3nosecurityheadersIntegDefaultTestDeployAssertAB4B2F28.assets.json +2 -1
  64. package/test/integ.cftoais3-no-security-headers.js.snapshot/integ.json +3 -2
  65. package/test/integ.cftoais3-no-security-headers.js.snapshot/manifest.json +4 -3
  66. package/test/integ.cftoais3-no-security-headers.js.snapshot/tree.json +1 -1214
package/test/integ.cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket.js.snapshot/tree.json CHANGED
@@ -1,1214 +1 @@
1
- {
2
- "version": "tree-0.1",
3
- "tree": {
4
- "id": "App",
5
- "path": "",
6
- "children": {
7
- "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket": {
8
- "id": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket",
9
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket",
10
- "children": {
11
- "existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket": {
12
- "id": "existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket",
13
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket",
14
- "children": {
15
- "Resource": {
16
- "id": "Resource",
17
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/Resource",
18
- "attributes": {
19
- "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
20
- "aws:cdk:cloudformation:props": {
21
- "bucketEncryption": {
22
- "serverSideEncryptionConfiguration": [
23
- {
24
- "serverSideEncryptionByDefault": {
25
- "sseAlgorithm": "AES256"
26
- }
27
- }
28
- ]
29
- },
30
- "publicAccessBlockConfiguration": {
31
- "blockPublicAcls": true,
32
- "blockPublicPolicy": true,
33
- "ignorePublicAcls": true,
34
- "restrictPublicBuckets": true
35
- },
36
- "tags": [
37
- {
38
- "key": "aws-cdk:auto-delete-objects",
39
- "value": "true"
40
- }
41
- ],
42
- "versioningConfiguration": {
43
- "status": "Enabled"
44
- }
45
- }
46
- },
47
- "constructInfo": {
48
- "fqn": "aws-cdk-lib.aws_s3.CfnBucket",
49
- "version": "2.179.0"
50
- }
51
- },
52
- "Policy": {
53
- "id": "Policy",
54
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/Policy",
55
- "children": {
56
- "Resource": {
57
- "id": "Resource",
58
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/Policy/Resource",
59
- "attributes": {
60
- "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
61
- "aws:cdk:cloudformation:props": {
62
- "bucket": {
63
- "Ref": "existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7"
64
- },
65
- "policyDocument": {
66
- "Statement": [
67
- {
68
- "Action": "s3:*",
69
- "Condition": {
70
- "Bool": {
71
- "aws:SecureTransport": "false"
72
- }
73
- },
74
- "Effect": "Deny",
75
- "Principal": {
76
- "AWS": "*"
77
- },
78
- "Resource": [
79
- {
80
- "Fn::GetAtt": [
81
- "existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7",
82
- "Arn"
83
- ]
84
- },
85
- {
86
- "Fn::Join": [
87
- "",
88
- [
89
- {
90
- "Fn::GetAtt": [
91
- "existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7",
92
- "Arn"
93
- ]
94
- },
95
- "/*"
96
- ]
97
- ]
98
- }
99
- ]
100
- },
101
- {
102
- "Action": [
103
- "s3:DeleteObject*",
104
- "s3:GetBucket*",
105
- "s3:List*",
106
- "s3:PutBucketPolicy"
107
- ],
108
- "Effect": "Allow",
109
- "Principal": {
110
- "AWS": {
111
- "Fn::GetAtt": [
112
- "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
113
- "Arn"
114
- ]
115
- }
116
- },
117
- "Resource": [
118
- {
119
- "Fn::GetAtt": [
120
- "existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7",
121
- "Arn"
122
- ]
123
- },
124
- {
125
- "Fn::Join": [
126
- "",
127
- [
128
- {
129
- "Fn::GetAtt": [
130
- "existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7",
131
- "Arn"
132
- ]
133
- },
134
- "/*"
135
- ]
136
- ]
137
- }
138
- ]
139
- },
140
- {
141
- "Action": "s3:PutObject",
142
- "Condition": {
143
- "ArnLike": {
144
- "aws:SourceArn": {
145
- "Fn::GetAtt": [
146
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
147
- "Arn"
148
- ]
149
- }
150
- },
151
- "StringEquals": {
152
- "aws:SourceAccount": {
153
- "Ref": "AWS::AccountId"
154
- }
155
- }
156
- },
157
- "Effect": "Allow",
158
- "Principal": {
159
- "Service": "logging.s3.amazonaws.com"
160
- },
161
- "Resource": {
162
- "Fn::Join": [
163
- "",
164
- [
165
- {
166
- "Fn::GetAtt": [
167
- "existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7",
168
- "Arn"
169
- ]
170
- },
171
- "/*"
172
- ]
173
- ]
174
- }
175
- }
176
- ],
177
- "Version": "2012-10-17"
178
- }
179
- }
180
- },
181
- "constructInfo": {
182
- "fqn": "aws-cdk-lib.aws_s3.CfnBucketPolicy",
183
- "version": "2.179.0"
184
- }
185
- }
186
- },
187
- "constructInfo": {
188
- "fqn": "aws-cdk-lib.aws_s3.BucketPolicy",
189
- "version": "2.179.0",
190
- "metadata": [
191
- {
192
- "bucket": "*"
193
- }
194
- ]
195
- }
196
- },
197
- "AutoDeleteObjectsCustomResource": {
198
- "id": "AutoDeleteObjectsCustomResource",
199
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/AutoDeleteObjectsCustomResource",
200
- "children": {
201
- "Default": {
202
- "id": "Default",
203
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/AutoDeleteObjectsCustomResource/Default",
204
- "constructInfo": {
205
- "fqn": "aws-cdk-lib.CfnResource",
206
- "version": "2.179.0"
207
- }
208
- }
209
- },
210
- "constructInfo": {
211
- "fqn": "aws-cdk-lib.CustomResource",
212
- "version": "2.179.0",
213
- "metadata": [
214
- "*"
215
- ]
216
- }
217
- }
218
- },
219
- "constructInfo": {
220
- "fqn": "aws-cdk-lib.aws_s3.Bucket",
221
- "version": "2.179.0",
222
- "metadata": [
223
- {
224
- "encryption": "S3_MANAGED",
225
- "versioned": true,
226
- "blockPublicAccess": "*",
227
- "removalPolicy": "destroy",
228
- "enforceSSL": true,
229
- "autoDeleteObjects": true
230
- }
231
- ]
232
- }
233
- },
234
- "LatestNodeRuntimeMap": {
235
- "id": "LatestNodeRuntimeMap",
236
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/LatestNodeRuntimeMap",
237
- "constructInfo": {
238
- "fqn": "aws-cdk-lib.CfnMapping",
239
- "version": "2.179.0"
240
- }
241
- },
242
- "Custom::S3AutoDeleteObjectsCustomResourceProvider": {
243
- "id": "Custom::S3AutoDeleteObjectsCustomResourceProvider",
244
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider",
245
- "children": {
246
- "Staging": {
247
- "id": "Staging",
248
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider/Staging",
249
- "constructInfo": {
250
- "fqn": "aws-cdk-lib.AssetStaging",
251
- "version": "2.179.0"
252
- }
253
- },
254
- "Role": {
255
- "id": "Role",
256
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider/Role",
257
- "constructInfo": {
258
- "fqn": "aws-cdk-lib.CfnResource",
259
- "version": "2.179.0"
260
- }
261
- },
262
- "Handler": {
263
- "id": "Handler",
264
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider/Handler",
265
- "constructInfo": {
266
- "fqn": "aws-cdk-lib.CfnResource",
267
- "version": "2.179.0"
268
- }
269
- }
270
- },
271
- "constructInfo": {
272
- "fqn": "aws-cdk-lib.CustomResourceProviderBase",
273
- "version": "2.179.0"
274
- }
275
- },
276
- "existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket": {
277
- "id": "existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket",
278
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket",
279
- "children": {
280
- "Resource": {
281
- "id": "Resource",
282
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/Resource",
283
- "attributes": {
284
- "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
285
- "aws:cdk:cloudformation:props": {
286
- "bucketEncryption": {
287
- "serverSideEncryptionConfiguration": [
288
- {
289
- "serverSideEncryptionByDefault": {
290
- "sseAlgorithm": "AES256"
291
- }
292
- }
293
- ]
294
- },
295
- "lifecycleConfiguration": {
296
- "rules": [
297
- {
298
- "noncurrentVersionTransitions": [
299
- {
300
- "storageClass": "GLACIER",
301
- "transitionInDays": 90
302
- }
303
- ],
304
- "status": "Enabled"
305
- }
306
- ]
307
- },
308
- "loggingConfiguration": {
309
- "destinationBucketName": {
310
- "Ref": "existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7"
311
- }
312
- },
313
- "publicAccessBlockConfiguration": {
314
- "blockPublicAcls": true,
315
- "blockPublicPolicy": true,
316
- "ignorePublicAcls": true,
317
- "restrictPublicBuckets": true
318
- },
319
- "tags": [
320
- {
321
- "key": "aws-cdk:auto-delete-objects",
322
- "value": "true"
323
- }
324
- ],
325
- "versioningConfiguration": {
326
- "status": "Enabled"
327
- }
328
- }
329
- },
330
- "constructInfo": {
331
- "fqn": "aws-cdk-lib.aws_s3.CfnBucket",
332
- "version": "2.179.0"
333
- }
334
- },
335
- "Policy": {
336
- "id": "Policy",
337
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/Policy",
338
- "children": {
339
- "Resource": {
340
- "id": "Resource",
341
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/Policy/Resource",
342
- "attributes": {
343
- "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
344
- "aws:cdk:cloudformation:props": {
345
- "bucket": {
346
- "Ref": "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A"
347
- },
348
- "policyDocument": {
349
- "Statement": [
350
- {
351
- "Action": "s3:*",
352
- "Condition": {
353
- "Bool": {
354
- "aws:SecureTransport": "false"
355
- }
356
- },
357
- "Effect": "Deny",
358
- "Principal": {
359
- "AWS": "*"
360
- },
361
- "Resource": [
362
- {
363
- "Fn::GetAtt": [
364
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
365
- "Arn"
366
- ]
367
- },
368
- {
369
- "Fn::Join": [
370
- "",
371
- [
372
- {
373
- "Fn::GetAtt": [
374
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
375
- "Arn"
376
- ]
377
- },
378
- "/*"
379
- ]
380
- ]
381
- }
382
- ]
383
- },
384
- {
385
- "Action": [
386
- "s3:DeleteObject*",
387
- "s3:GetBucket*",
388
- "s3:List*",
389
- "s3:PutBucketPolicy"
390
- ],
391
- "Effect": "Allow",
392
- "Principal": {
393
- "AWS": {
394
- "Fn::GetAtt": [
395
- "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
396
- "Arn"
397
- ]
398
- }
399
- },
400
- "Resource": [
401
- {
402
- "Fn::GetAtt": [
403
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
404
- "Arn"
405
- ]
406
- },
407
- {
408
- "Fn::Join": [
409
- "",
410
- [
411
- {
412
- "Fn::GetAtt": [
413
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
414
- "Arn"
415
- ]
416
- },
417
- "/*"
418
- ]
419
- ]
420
- }
421
- ]
422
- },
423
- {
424
- "Action": "s3:GetObject",
425
- "Effect": "Allow",
426
- "Principal": {
427
- "CanonicalUser": {
428
- "Fn::GetAtt": [
429
- "testcloudfrontoais3managedkeyconstructsGeneratedOai89C0D4F8",
430
- "S3CanonicalUserId"
431
- ]
432
- }
433
- },
434
- "Resource": {
435
- "Fn::Join": [
436
- "",
437
- [
438
- {
439
- "Fn::GetAtt": [
440
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
441
- "Arn"
442
- ]
443
- },
444
- "/*"
445
- ]
446
- ]
447
- }
448
- },
449
- {
450
- "Action": "s3:GetObject",
451
- "Condition": {
452
- "StringEquals": {
453
- "AWS:SourceArn": {
454
- "Fn::Join": [
455
- "",
456
- [
457
- "arn:",
458
- {
459
- "Ref": "AWS::Partition"
460
- },
461
- ":cloudfront::",
462
- {
463
- "Ref": "AWS::AccountId"
464
- },
465
- ":distribution/",
466
- {
467
- "Ref": "testcloudfrontoais3managedkeyCloudFrontDistributionD7203FE7"
468
- }
469
- ]
470
- ]
471
- }
472
- }
473
- },
474
- "Effect": "Allow",
475
- "Principal": {
476
- "Service": "cloudfront.amazonaws.com"
477
- },
478
- "Resource": {
479
- "Fn::Join": [
480
- "",
481
- [
482
- {
483
- "Fn::GetAtt": [
484
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
485
- "Arn"
486
- ]
487
- },
488
- "/*"
489
- ]
490
- ]
491
- }
492
- }
493
- ],
494
- "Version": "2012-10-17"
495
- }
496
- }
497
- },
498
- "constructInfo": {
499
- "fqn": "aws-cdk-lib.aws_s3.CfnBucketPolicy",
500
- "version": "2.179.0"
501
- }
502
- }
503
- },
504
- "constructInfo": {
505
- "fqn": "aws-cdk-lib.aws_s3.BucketPolicy",
506
- "version": "2.179.0",
507
- "metadata": [
508
- {
509
- "bucket": "*"
510
- }
511
- ]
512
- }
513
- },
514
- "AutoDeleteObjectsCustomResource": {
515
- "id": "AutoDeleteObjectsCustomResource",
516
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/AutoDeleteObjectsCustomResource",
517
- "children": {
518
- "Default": {
519
- "id": "Default",
520
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/AutoDeleteObjectsCustomResource/Default",
521
- "constructInfo": {
522
- "fqn": "aws-cdk-lib.CfnResource",
523
- "version": "2.179.0"
524
- }
525
- }
526
- },
527
- "constructInfo": {
528
- "fqn": "aws-cdk-lib.CustomResource",
529
- "version": "2.179.0",
530
- "metadata": [
531
- "*"
532
- ]
533
- }
534
- }
535
- },
536
- "constructInfo": {
537
- "fqn": "aws-cdk-lib.aws_s3.Bucket",
538
- "version": "2.179.0",
539
- "metadata": [
540
- {
541
- "encryption": "S3_MANAGED",
542
- "versioned": true,
543
- "blockPublicAccess": "*",
544
- "removalPolicy": "destroy",
545
- "enforceSSL": true,
546
- "lifecycleRules": [
547
- {
548
- "noncurrentVersionTransitions": [
549
- {
550
- "storageClass": "*"
551
- }
552
- ]
553
- }
554
- ],
555
- "serverAccessLogsBucket": "*",
556
- "autoDeleteObjects": true
557
- },
558
- {
559
- "addLifecycleRule": [
560
- {
561
- "noncurrentVersionTransitions": [
562
- {
563
- "storageClass": "*"
564
- }
565
- ]
566
- },
567
- "*",
568
- "*"
569
- ]
570
- }
571
- ]
572
- }
573
- },
574
- "test-cloudfront-oai-s3-managed-key": {
575
- "id": "test-cloudfront-oai-s3-managed-key",
576
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key",
577
- "children": {
578
- "CloudfrontLoggingBucketAccessLog": {
579
- "id": "CloudfrontLoggingBucketAccessLog",
580
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog",
581
- "children": {
582
- "Resource": {
583
- "id": "Resource",
584
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/Resource",
585
- "attributes": {
586
- "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
587
- "aws:cdk:cloudformation:props": {
588
- "bucketEncryption": {
589
- "serverSideEncryptionConfiguration": [
590
- {
591
- "serverSideEncryptionByDefault": {
592
- "sseAlgorithm": "AES256"
593
- }
594
- }
595
- ]
596
- },
597
- "publicAccessBlockConfiguration": {
598
- "blockPublicAcls": true,
599
- "blockPublicPolicy": true,
600
- "ignorePublicAcls": true,
601
- "restrictPublicBuckets": true
602
- },
603
- "tags": [
604
- {
605
- "key": "aws-cdk:auto-delete-objects",
606
- "value": "true"
607
- }
608
- ],
609
- "versioningConfiguration": {
610
- "status": "Enabled"
611
- }
612
- }
613
- },
614
- "constructInfo": {
615
- "fqn": "aws-cdk-lib.aws_s3.CfnBucket",
616
- "version": "2.179.0"
617
- }
618
- },
619
- "Policy": {
620
- "id": "Policy",
621
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/Policy",
622
- "children": {
623
- "Resource": {
624
- "id": "Resource",
625
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/Policy/Resource",
626
- "attributes": {
627
- "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
628
- "aws:cdk:cloudformation:props": {
629
- "bucket": {
630
- "Ref": "testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9"
631
- },
632
- "policyDocument": {
633
- "Statement": [
634
- {
635
- "Action": "s3:*",
636
- "Condition": {
637
- "Bool": {
638
- "aws:SecureTransport": "false"
639
- }
640
- },
641
- "Effect": "Deny",
642
- "Principal": {
643
- "AWS": "*"
644
- },
645
- "Resource": [
646
- {
647
- "Fn::GetAtt": [
648
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9",
649
- "Arn"
650
- ]
651
- },
652
- {
653
- "Fn::Join": [
654
- "",
655
- [
656
- {
657
- "Fn::GetAtt": [
658
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9",
659
- "Arn"
660
- ]
661
- },
662
- "/*"
663
- ]
664
- ]
665
- }
666
- ]
667
- },
668
- {
669
- "Action": [
670
- "s3:DeleteObject*",
671
- "s3:GetBucket*",
672
- "s3:List*",
673
- "s3:PutBucketPolicy"
674
- ],
675
- "Effect": "Allow",
676
- "Principal": {
677
- "AWS": {
678
- "Fn::GetAtt": [
679
- "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
680
- "Arn"
681
- ]
682
- }
683
- },
684
- "Resource": [
685
- {
686
- "Fn::GetAtt": [
687
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9",
688
- "Arn"
689
- ]
690
- },
691
- {
692
- "Fn::Join": [
693
- "",
694
- [
695
- {
696
- "Fn::GetAtt": [
697
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9",
698
- "Arn"
699
- ]
700
- },
701
- "/*"
702
- ]
703
- ]
704
- }
705
- ]
706
- },
707
- {
708
- "Action": "s3:PutObject",
709
- "Condition": {
710
- "ArnLike": {
711
- "aws:SourceArn": {
712
- "Fn::GetAtt": [
713
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72",
714
- "Arn"
715
- ]
716
- }
717
- },
718
- "StringEquals": {
719
- "aws:SourceAccount": {
720
- "Ref": "AWS::AccountId"
721
- }
722
- }
723
- },
724
- "Effect": "Allow",
725
- "Principal": {
726
- "Service": "logging.s3.amazonaws.com"
727
- },
728
- "Resource": {
729
- "Fn::Join": [
730
- "",
731
- [
732
- {
733
- "Fn::GetAtt": [
734
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9",
735
- "Arn"
736
- ]
737
- },
738
- "/*"
739
- ]
740
- ]
741
- }
742
- }
743
- ],
744
- "Version": "2012-10-17"
745
- }
746
- }
747
- },
748
- "constructInfo": {
749
- "fqn": "aws-cdk-lib.aws_s3.CfnBucketPolicy",
750
- "version": "2.179.0"
751
- }
752
- }
753
- },
754
- "constructInfo": {
755
- "fqn": "aws-cdk-lib.aws_s3.BucketPolicy",
756
- "version": "2.179.0",
757
- "metadata": [
758
- {
759
- "bucket": "*"
760
- }
761
- ]
762
- }
763
- },
764
- "AutoDeleteObjectsCustomResource": {
765
- "id": "AutoDeleteObjectsCustomResource",
766
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/AutoDeleteObjectsCustomResource",
767
- "children": {
768
- "Default": {
769
- "id": "Default",
770
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/AutoDeleteObjectsCustomResource/Default",
771
- "constructInfo": {
772
- "fqn": "aws-cdk-lib.CfnResource",
773
- "version": "2.179.0"
774
- }
775
- }
776
- },
777
- "constructInfo": {
778
- "fqn": "aws-cdk-lib.CustomResource",
779
- "version": "2.179.0",
780
- "metadata": [
781
- "*"
782
- ]
783
- }
784
- }
785
- },
786
- "constructInfo": {
787
- "fqn": "aws-cdk-lib.aws_s3.Bucket",
788
- "version": "2.179.0",
789
- "metadata": [
790
- {
791
- "encryption": "S3_MANAGED",
792
- "versioned": true,
793
- "blockPublicAccess": "*",
794
- "removalPolicy": "destroy",
795
- "enforceSSL": true,
796
- "autoDeleteObjects": true
797
- }
798
- ]
799
- }
800
- },
801
- "CloudfrontLoggingBucket": {
802
- "id": "CloudfrontLoggingBucket",
803
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket",
804
- "children": {
805
- "Resource": {
806
- "id": "Resource",
807
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/Resource",
808
- "attributes": {
809
- "aws:cdk:cloudformation:type": "AWS::S3::Bucket",
810
- "aws:cdk:cloudformation:props": {
811
- "bucketEncryption": {
812
- "serverSideEncryptionConfiguration": [
813
- {
814
- "serverSideEncryptionByDefault": {
815
- "sseAlgorithm": "AES256"
816
- }
817
- }
818
- ]
819
- },
820
- "loggingConfiguration": {
821
- "destinationBucketName": {
822
- "Ref": "testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9"
823
- }
824
- },
825
- "ownershipControls": {
826
- "rules": [
827
- {
828
- "objectOwnership": "ObjectWriter"
829
- }
830
- ]
831
- },
832
- "publicAccessBlockConfiguration": {
833
- "blockPublicAcls": true,
834
- "blockPublicPolicy": true,
835
- "ignorePublicAcls": true,
836
- "restrictPublicBuckets": true
837
- },
838
- "tags": [
839
- {
840
- "key": "aws-cdk:auto-delete-objects",
841
- "value": "true"
842
- }
843
- ],
844
- "versioningConfiguration": {
845
- "status": "Enabled"
846
- }
847
- }
848
- },
849
- "constructInfo": {
850
- "fqn": "aws-cdk-lib.aws_s3.CfnBucket",
851
- "version": "2.179.0"
852
- }
853
- },
854
- "Policy": {
855
- "id": "Policy",
856
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/Policy",
857
- "children": {
858
- "Resource": {
859
- "id": "Resource",
860
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/Policy/Resource",
861
- "attributes": {
862
- "aws:cdk:cloudformation:type": "AWS::S3::BucketPolicy",
863
- "aws:cdk:cloudformation:props": {
864
- "bucket": {
865
- "Ref": "testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72"
866
- },
867
- "policyDocument": {
868
- "Statement": [
869
- {
870
- "Action": "s3:*",
871
- "Condition": {
872
- "Bool": {
873
- "aws:SecureTransport": "false"
874
- }
875
- },
876
- "Effect": "Deny",
877
- "Principal": {
878
- "AWS": "*"
879
- },
880
- "Resource": [
881
- {
882
- "Fn::GetAtt": [
883
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72",
884
- "Arn"
885
- ]
886
- },
887
- {
888
- "Fn::Join": [
889
- "",
890
- [
891
- {
892
- "Fn::GetAtt": [
893
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72",
894
- "Arn"
895
- ]
896
- },
897
- "/*"
898
- ]
899
- ]
900
- }
901
- ]
902
- },
903
- {
904
- "Action": [
905
- "s3:DeleteObject*",
906
- "s3:GetBucket*",
907
- "s3:List*",
908
- "s3:PutBucketPolicy"
909
- ],
910
- "Effect": "Allow",
911
- "Principal": {
912
- "AWS": {
913
- "Fn::GetAtt": [
914
- "CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092",
915
- "Arn"
916
- ]
917
- }
918
- },
919
- "Resource": [
920
- {
921
- "Fn::GetAtt": [
922
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72",
923
- "Arn"
924
- ]
925
- },
926
- {
927
- "Fn::Join": [
928
- "",
929
- [
930
- {
931
- "Fn::GetAtt": [
932
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72",
933
- "Arn"
934
- ]
935
- },
936
- "/*"
937
- ]
938
- ]
939
- }
940
- ]
941
- }
942
- ],
943
- "Version": "2012-10-17"
944
- }
945
- }
946
- },
947
- "constructInfo": {
948
- "fqn": "aws-cdk-lib.aws_s3.CfnBucketPolicy",
949
- "version": "2.179.0"
950
- }
951
- }
952
- },
953
- "constructInfo": {
954
- "fqn": "aws-cdk-lib.aws_s3.BucketPolicy",
955
- "version": "2.179.0",
956
- "metadata": [
957
- {
958
- "bucket": "*"
959
- }
960
- ]
961
- }
962
- },
963
- "AutoDeleteObjectsCustomResource": {
964
- "id": "AutoDeleteObjectsCustomResource",
965
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/AutoDeleteObjectsCustomResource",
966
- "children": {
967
- "Default": {
968
- "id": "Default",
969
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/AutoDeleteObjectsCustomResource/Default",
970
- "constructInfo": {
971
- "fqn": "aws-cdk-lib.CfnResource",
972
- "version": "2.179.0"
973
- }
974
- }
975
- },
976
- "constructInfo": {
977
- "fqn": "aws-cdk-lib.CustomResource",
978
- "version": "2.179.0",
979
- "metadata": [
980
- "*"
981
- ]
982
- }
983
- }
984
- },
985
- "constructInfo": {
986
- "fqn": "aws-cdk-lib.aws_s3.Bucket",
987
- "version": "2.179.0",
988
- "metadata": [
989
- {
990
- "encryption": "S3_MANAGED",
991
- "versioned": true,
992
- "blockPublicAccess": "*",
993
- "removalPolicy": "destroy",
994
- "enforceSSL": true,
995
- "autoDeleteObjects": true,
996
- "objectOwnership": "ObjectWriter",
997
- "serverAccessLogsBucket": "*"
998
- }
999
- ]
1000
- }
1001
- },
1002
- "constructsGeneratedOai": {
1003
- "id": "constructsGeneratedOai",
1004
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/constructsGeneratedOai",
1005
- "children": {
1006
- "Resource": {
1007
- "id": "Resource",
1008
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/constructsGeneratedOai/Resource",
1009
- "attributes": {
1010
- "aws:cdk:cloudformation:type": "AWS::CloudFront::CloudFrontOriginAccessIdentity",
1011
- "aws:cdk:cloudformation:props": {
1012
- "cloudFrontOriginAccessIdentityConfig": {
1013
- "comment": "Allows CloudFront to reach the bucket"
1014
- }
1015
- }
1016
- },
1017
- "constructInfo": {
1018
- "fqn": "aws-cdk-lib.aws_cloudfront.CfnCloudFrontOriginAccessIdentity",
1019
- "version": "2.179.0"
1020
- }
1021
- }
1022
- },
1023
- "constructInfo": {
1024
- "fqn": "aws-cdk-lib.aws_cloudfront.OriginAccessIdentity",
1025
- "version": "2.179.0",
1026
- "metadata": [
1027
- "*"
1028
- ]
1029
- }
1030
- },
1031
- "CloudFrontDistribution": {
1032
- "id": "CloudFrontDistribution",
1033
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudFrontDistribution",
1034
- "children": {
1035
- "Origin1": {
1036
- "id": "Origin1",
1037
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudFrontDistribution/Origin1",
1038
- "constructInfo": {
1039
- "fqn": "constructs.Construct",
1040
- "version": "10.4.2"
1041
- }
1042
- },
1043
- "Resource": {
1044
- "id": "Resource",
1045
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudFrontDistribution/Resource",
1046
- "attributes": {
1047
- "aws:cdk:cloudformation:type": "AWS::CloudFront::Distribution",
1048
- "aws:cdk:cloudformation:props": {
1049
- "distributionConfig": {
1050
- "enabled": true,
1051
- "origins": [
1052
- {
1053
- "domainName": {
1054
- "Fn::GetAtt": [
1055
- "existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A",
1056
- "RegionalDomainName"
1057
- ]
1058
- },
1059
- "id": "cftoais3bucketencryptedwithmanagedkeyprovidedasexistingbuckettestcloudfrontoais3managedkeyCloudFrontDistributionOrigin1B257510C",
1060
- "s3OriginConfig": {
1061
- "originAccessIdentity": {
1062
- "Fn::Join": [
1063
- "",
1064
- [
1065
- "origin-access-identity/cloudfront/",
1066
- {
1067
- "Ref": "testcloudfrontoais3managedkeyconstructsGeneratedOai89C0D4F8"
1068
- }
1069
- ]
1070
- ]
1071
- }
1072
- }
1073
- }
1074
- ],
1075
- "defaultCacheBehavior": {
1076
- "pathPattern": "*",
1077
- "targetOriginId": "cftoais3bucketencryptedwithmanagedkeyprovidedasexistingbuckettestcloudfrontoais3managedkeyCloudFrontDistributionOrigin1B257510C",
1078
- "cachePolicyId": "658327ea-f89d-4fab-a63d-7e88639e58f6",
1079
- "compress": true,
1080
- "viewerProtocolPolicy": "redirect-to-https"
1081
- },
1082
- "defaultRootObject": "index.html",
1083
- "httpVersion": "http2",
1084
- "ipv6Enabled": true,
1085
- "logging": {
1086
- "bucket": {
1087
- "Fn::GetAtt": [
1088
- "testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72",
1089
- "RegionalDomainName"
1090
- ]
1091
- }
1092
- }
1093
- }
1094
- }
1095
- },
1096
- "constructInfo": {
1097
- "fqn": "aws-cdk-lib.aws_cloudfront.CfnDistribution",
1098
- "version": "2.179.0"
1099
- }
1100
- }
1101
- },
1102
- "constructInfo": {
1103
- "fqn": "aws-cdk-lib.aws_cloudfront.Distribution",
1104
- "version": "2.179.0",
1105
- "metadata": [
1106
- {
1107
- "defaultBehavior": {
1108
- "origin": "*",
1109
- "viewerProtocolPolicy": "redirect-to-https"
1110
- },
1111
- "enableLogging": true,
1112
- "logBucket": "*",
1113
- "defaultRootObject": "*"
1114
- }
1115
- ]
1116
- }
1117
- }
1118
- },
1119
- "constructInfo": {
1120
- "fqn": "@aws-solutions-constructs/aws-cloudfront-oai-s3.CloudFrontToOaiToS3",
1121
- "version": "2.79.1"
1122
- }
1123
- },
1124
- "Integ": {
1125
- "id": "Integ",
1126
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ",
1127
- "children": {
1128
- "DefaultTest": {
1129
- "id": "DefaultTest",
1130
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest",
1131
- "children": {
1132
- "Default": {
1133
- "id": "Default",
1134
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/Default",
1135
- "constructInfo": {
1136
- "fqn": "constructs.Construct",
1137
- "version": "10.4.2"
1138
- }
1139
- },
1140
- "DeployAssert": {
1141
- "id": "DeployAssert",
1142
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/DeployAssert",
1143
- "children": {
1144
- "BootstrapVersion": {
1145
- "id": "BootstrapVersion",
1146
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/DeployAssert/BootstrapVersion",
1147
- "constructInfo": {
1148
- "fqn": "aws-cdk-lib.CfnParameter",
1149
- "version": "2.179.0"
1150
- }
1151
- },
1152
- "CheckBootstrapVersion": {
1153
- "id": "CheckBootstrapVersion",
1154
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/DeployAssert/CheckBootstrapVersion",
1155
- "constructInfo": {
1156
- "fqn": "aws-cdk-lib.CfnRule",
1157
- "version": "2.179.0"
1158
- }
1159
- }
1160
- },
1161
- "constructInfo": {
1162
- "fqn": "aws-cdk-lib.Stack",
1163
- "version": "2.179.0"
1164
- }
1165
- }
1166
- },
1167
- "constructInfo": {
1168
- "fqn": "@aws-cdk/integ-tests-alpha.IntegTestCase",
1169
- "version": "2.179.0-alpha.0"
1170
- }
1171
- }
1172
- },
1173
- "constructInfo": {
1174
- "fqn": "@aws-cdk/integ-tests-alpha.IntegTest",
1175
- "version": "2.179.0-alpha.0"
1176
- }
1177
- },
1178
- "BootstrapVersion": {
1179
- "id": "BootstrapVersion",
1180
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/BootstrapVersion",
1181
- "constructInfo": {
1182
- "fqn": "aws-cdk-lib.CfnParameter",
1183
- "version": "2.179.0"
1184
- }
1185
- },
1186
- "CheckBootstrapVersion": {
1187
- "id": "CheckBootstrapVersion",
1188
- "path": "cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/CheckBootstrapVersion",
1189
- "constructInfo": {
1190
- "fqn": "aws-cdk-lib.CfnRule",
1191
- "version": "2.179.0"
1192
- }
1193
- }
1194
- },
1195
- "constructInfo": {
1196
- "fqn": "aws-cdk-lib.Stack",
1197
- "version": "2.179.0"
1198
- }
1199
- },
1200
- "Tree": {
1201
- "id": "Tree",
1202
- "path": "Tree",
1203
- "constructInfo": {
1204
- "fqn": "constructs.Construct",
1205
- "version": "10.4.2"
1206
- }
1207
- }
1208
- },
1209
- "constructInfo": {
1210
- "fqn": "aws-cdk-lib.App",
1211
- "version": "2.179.0"
1212
- }
1213
- }
1214
- }
1
+ {"version":"tree-0.1","tree":{"id":"App","path":"","children":{"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket":{"id":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket","children":{"existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket":{"id":"existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::Bucket","aws:cdk:cloudformation:props":{"bucketEncryption":{"serverSideEncryptionConfiguration":[{"serverSideEncryptionByDefault":{"sseAlgorithm":"AES256"}}]},"publicAccessBlockConfiguration":{"blockPublicAcls":true,"blockPublicPolicy":true,"ignorePublicAcls":true,"restrictPublicBuckets":true},"tags":[{"key":"aws-cdk:auto-delete-objects","value":"true"}],"versioningConfiguration":{"status":"Enabled"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucket","version":"2.193.0"}},"Policy":{"id":"Policy","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/Policy","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/Policy/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::BucketPolicy","aws:cdk:cloudformation:props":{"bucket":{"Ref":"existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7"},"policyDocument":{"Statement":[{"Action":"s3:*","Condition":{"Bool":{"aws:SecureTransport":"false"}},"Effect":"Deny","Principal":{"AWS":"*"},"Resource":[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7","Arn"]},"/*"]]}]},{"Action":["s3:DeleteObject*","s3:GetBucket*","s3:List*","s3:PutBucketPolicy"],"Effect":"Allow","Principal":{"AWS":{"Fn::GetAtt":["CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092","Arn"]}},"Resource":[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7","Arn"]},"/*"]]}]},{"Action":"s3:PutObject","Condition":{"ArnLike":{"aws:SourceArn":{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","Arn"]}},"StringEquals":{"aws:SourceAccount":{"Ref":"AWS::AccountId"}}},"Effect":"Allow","Principal":{"Service":"logging.s3.amazonaws.com"},"Resource":{"Fn::Join":["",[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7","Arn"]},"/*"]]}}],"Version":"2012-10-17"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucketPolicy","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.BucketPolicy","version":"2.193.0","metadata":[{"bucket":"*"}]}},"AutoDeleteObjectsCustomResource":{"id":"AutoDeleteObjectsCustomResource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/AutoDeleteObjectsCustomResource","children":{"Default":{"id":"Default","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3LoggingBucket/AutoDeleteObjectsCustomResource/Default","constructInfo":{"fqn":"aws-cdk-lib.CfnResource","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.CustomResource","version":"2.193.0","metadata":["*"]}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.Bucket","version":"2.193.0","metadata":[{"encryption":"S3_MANAGED","versioned":true,"blockPublicAccess":"*","removalPolicy":"destroy","enforceSSL":true,"autoDeleteObjects":true}]}},"LatestNodeRuntimeMap":{"id":"LatestNodeRuntimeMap","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/LatestNodeRuntimeMap","constructInfo":{"fqn":"aws-cdk-lib.CfnMapping","version":"2.193.0"}},"Custom::S3AutoDeleteObjectsCustomResourceProvider":{"id":"Custom::S3AutoDeleteObjectsCustomResourceProvider","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider","children":{"Staging":{"id":"Staging","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider/Staging","constructInfo":{"fqn":"aws-cdk-lib.AssetStaging","version":"2.193.0"}},"Role":{"id":"Role","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider/Role","constructInfo":{"fqn":"aws-cdk-lib.CfnResource","version":"2.193.0"}},"Handler":{"id":"Handler","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Custom::S3AutoDeleteObjectsCustomResourceProvider/Handler","constructInfo":{"fqn":"aws-cdk-lib.CfnResource","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.CustomResourceProviderBase","version":"2.193.0"}},"existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket":{"id":"existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::Bucket","aws:cdk:cloudformation:props":{"bucketEncryption":{"serverSideEncryptionConfiguration":[{"serverSideEncryptionByDefault":{"sseAlgorithm":"AES256"}}]},"lifecycleConfiguration":{"rules":[{"noncurrentVersionTransitions":[{"storageClass":"GLACIER","transitionInDays":90}],"status":"Enabled"}]},"loggingConfiguration":{"destinationBucketName":{"Ref":"existings3bucketencryptedwiths3managedkeyS3LoggingBucketF861F6B7"}},"publicAccessBlockConfiguration":{"blockPublicAcls":true,"blockPublicPolicy":true,"ignorePublicAcls":true,"restrictPublicBuckets":true},"tags":[{"key":"aws-cdk:auto-delete-objects","value":"true"}],"versioningConfiguration":{"status":"Enabled"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucket","version":"2.193.0"}},"Policy":{"id":"Policy","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/Policy","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/Policy/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::BucketPolicy","aws:cdk:cloudformation:props":{"bucket":{"Ref":"existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A"},"policyDocument":{"Statement":[{"Action":"s3:*","Condition":{"Bool":{"aws:SecureTransport":"false"}},"Effect":"Deny","Principal":{"AWS":"*"},"Resource":[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","Arn"]},"/*"]]}]},{"Action":["s3:DeleteObject*","s3:GetBucket*","s3:List*","s3:PutBucketPolicy"],"Effect":"Allow","Principal":{"AWS":{"Fn::GetAtt":["CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092","Arn"]}},"Resource":[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","Arn"]},"/*"]]}]},{"Action":"s3:GetObject","Effect":"Allow","Principal":{"CanonicalUser":{"Fn::GetAtt":["testcloudfrontoais3managedkeyconstructsGeneratedOai89C0D4F8","S3CanonicalUserId"]}},"Resource":{"Fn::Join":["",[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","Arn"]},"/*"]]}},{"Action":"s3:GetObject","Condition":{"StringEquals":{"AWS:SourceArn":{"Fn::Join":["",["arn:",{"Ref":"AWS::Partition"},":cloudfront::",{"Ref":"AWS::AccountId"},":distribution/",{"Ref":"testcloudfrontoais3managedkeyCloudFrontDistributionD7203FE7"}]]}}},"Effect":"Allow","Principal":{"Service":"cloudfront.amazonaws.com"},"Resource":{"Fn::Join":["",[{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","Arn"]},"/*"]]}}],"Version":"2012-10-17"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucketPolicy","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.BucketPolicy","version":"2.193.0","metadata":[{"bucket":"*"}]}},"AutoDeleteObjectsCustomResource":{"id":"AutoDeleteObjectsCustomResource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/AutoDeleteObjectsCustomResource","children":{"Default":{"id":"Default","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/existing-s3-bucket-encrypted-with-s3-managed-keyS3Bucket/AutoDeleteObjectsCustomResource/Default","constructInfo":{"fqn":"aws-cdk-lib.CfnResource","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.CustomResource","version":"2.193.0","metadata":["*"]}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.Bucket","version":"2.193.0","metadata":[{"encryption":"S3_MANAGED","versioned":true,"blockPublicAccess":"*","removalPolicy":"destroy","enforceSSL":true,"lifecycleRules":[{"noncurrentVersionTransitions":[{"storageClass":"*"}]}],"serverAccessLogsBucket":"*","autoDeleteObjects":true},{"addLifecycleRule":[{"noncurrentVersionTransitions":[{"storageClass":"*"}]},"*","*"]}]}},"test-cloudfront-oai-s3-managed-key":{"id":"test-cloudfront-oai-s3-managed-key","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key","children":{"CloudfrontLoggingBucketAccessLog":{"id":"CloudfrontLoggingBucketAccessLog","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::Bucket","aws:cdk:cloudformation:props":{"bucketEncryption":{"serverSideEncryptionConfiguration":[{"serverSideEncryptionByDefault":{"sseAlgorithm":"AES256"}}]},"publicAccessBlockConfiguration":{"blockPublicAcls":true,"blockPublicPolicy":true,"ignorePublicAcls":true,"restrictPublicBuckets":true},"tags":[{"key":"aws-cdk:auto-delete-objects","value":"true"}],"versioningConfiguration":{"status":"Enabled"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucket","version":"2.193.0"}},"Policy":{"id":"Policy","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/Policy","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/Policy/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::BucketPolicy","aws:cdk:cloudformation:props":{"bucket":{"Ref":"testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9"},"policyDocument":{"Statement":[{"Action":"s3:*","Condition":{"Bool":{"aws:SecureTransport":"false"}},"Effect":"Deny","Principal":{"AWS":"*"},"Resource":[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9","Arn"]},"/*"]]}]},{"Action":["s3:DeleteObject*","s3:GetBucket*","s3:List*","s3:PutBucketPolicy"],"Effect":"Allow","Principal":{"AWS":{"Fn::GetAtt":["CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092","Arn"]}},"Resource":[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9","Arn"]},"/*"]]}]},{"Action":"s3:PutObject","Condition":{"ArnLike":{"aws:SourceArn":{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72","Arn"]}},"StringEquals":{"aws:SourceAccount":{"Ref":"AWS::AccountId"}}},"Effect":"Allow","Principal":{"Service":"logging.s3.amazonaws.com"},"Resource":{"Fn::Join":["",[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9","Arn"]},"/*"]]}}],"Version":"2012-10-17"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucketPolicy","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.BucketPolicy","version":"2.193.0","metadata":[{"bucket":"*"}]}},"AutoDeleteObjectsCustomResource":{"id":"AutoDeleteObjectsCustomResource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/AutoDeleteObjectsCustomResource","children":{"Default":{"id":"Default","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucketAccessLog/AutoDeleteObjectsCustomResource/Default","constructInfo":{"fqn":"aws-cdk-lib.CfnResource","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.CustomResource","version":"2.193.0","metadata":["*"]}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.Bucket","version":"2.193.0","metadata":[{"encryption":"S3_MANAGED","versioned":true,"blockPublicAccess":"*","removalPolicy":"destroy","enforceSSL":true,"autoDeleteObjects":true}]}},"CloudfrontLoggingBucket":{"id":"CloudfrontLoggingBucket","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::Bucket","aws:cdk:cloudformation:props":{"bucketEncryption":{"serverSideEncryptionConfiguration":[{"serverSideEncryptionByDefault":{"sseAlgorithm":"AES256"}}]},"loggingConfiguration":{"destinationBucketName":{"Ref":"testcloudfrontoais3managedkeyCloudfrontLoggingBucketAccessLog2E3935E9"}},"ownershipControls":{"rules":[{"objectOwnership":"ObjectWriter"}]},"publicAccessBlockConfiguration":{"blockPublicAcls":true,"blockPublicPolicy":true,"ignorePublicAcls":true,"restrictPublicBuckets":true},"tags":[{"key":"aws-cdk:auto-delete-objects","value":"true"}],"versioningConfiguration":{"status":"Enabled"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucket","version":"2.193.0"}},"Policy":{"id":"Policy","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/Policy","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/Policy/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::S3::BucketPolicy","aws:cdk:cloudformation:props":{"bucket":{"Ref":"testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72"},"policyDocument":{"Statement":[{"Action":"s3:*","Condition":{"Bool":{"aws:SecureTransport":"false"}},"Effect":"Deny","Principal":{"AWS":"*"},"Resource":[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72","Arn"]},"/*"]]}]},{"Action":["s3:DeleteObject*","s3:GetBucket*","s3:List*","s3:PutBucketPolicy"],"Effect":"Allow","Principal":{"AWS":{"Fn::GetAtt":["CustomS3AutoDeleteObjectsCustomResourceProviderRole3B1BD092","Arn"]}},"Resource":[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72","Arn"]},{"Fn::Join":["",[{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72","Arn"]},"/*"]]}]}],"Version":"2012-10-17"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.CfnBucketPolicy","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.BucketPolicy","version":"2.193.0","metadata":[{"bucket":"*"}]}},"AutoDeleteObjectsCustomResource":{"id":"AutoDeleteObjectsCustomResource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/AutoDeleteObjectsCustomResource","children":{"Default":{"id":"Default","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudfrontLoggingBucket/AutoDeleteObjectsCustomResource/Default","constructInfo":{"fqn":"aws-cdk-lib.CfnResource","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.CustomResource","version":"2.193.0","metadata":["*"]}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_s3.Bucket","version":"2.193.0","metadata":[{"encryption":"S3_MANAGED","versioned":true,"blockPublicAccess":"*","removalPolicy":"destroy","enforceSSL":true,"autoDeleteObjects":true,"objectOwnership":"ObjectWriter","serverAccessLogsBucket":"*"}]}},"constructsGeneratedOai":{"id":"constructsGeneratedOai","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/constructsGeneratedOai","children":{"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/constructsGeneratedOai/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::CloudFront::CloudFrontOriginAccessIdentity","aws:cdk:cloudformation:props":{"cloudFrontOriginAccessIdentityConfig":{"comment":"Allows CloudFront to reach the bucket"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_cloudfront.CfnCloudFrontOriginAccessIdentity","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_cloudfront.OriginAccessIdentity","version":"2.193.0","metadata":["*"]}},"CloudFrontDistribution":{"id":"CloudFrontDistribution","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudFrontDistribution","children":{"Origin1":{"id":"Origin1","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudFrontDistribution/Origin1","constructInfo":{"fqn":"constructs.Construct","version":"10.4.2"}},"Resource":{"id":"Resource","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/test-cloudfront-oai-s3-managed-key/CloudFrontDistribution/Resource","attributes":{"aws:cdk:cloudformation:type":"AWS::CloudFront::Distribution","aws:cdk:cloudformation:props":{"distributionConfig":{"enabled":true,"origins":[{"domainName":{"Fn::GetAtt":["existings3bucketencryptedwiths3managedkeyS3BucketA8C4BE9A","RegionalDomainName"]},"id":"cftoais3bucketencryptedwithmanagedkeyprovidedasexistingbuckettestcloudfrontoais3managedkeyCloudFrontDistributionOrigin1B257510C","s3OriginConfig":{"originAccessIdentity":{"Fn::Join":["",["origin-access-identity/cloudfront/",{"Ref":"testcloudfrontoais3managedkeyconstructsGeneratedOai89C0D4F8"}]]}}}],"defaultCacheBehavior":{"pathPattern":"*","targetOriginId":"cftoais3bucketencryptedwithmanagedkeyprovidedasexistingbuckettestcloudfrontoais3managedkeyCloudFrontDistributionOrigin1B257510C","cachePolicyId":"658327ea-f89d-4fab-a63d-7e88639e58f6","compress":true,"viewerProtocolPolicy":"redirect-to-https"},"defaultRootObject":"index.html","httpVersion":"http2","ipv6Enabled":true,"logging":{"bucket":{"Fn::GetAtt":["testcloudfrontoais3managedkeyCloudfrontLoggingBucketE6FDAA72","RegionalDomainName"]}}}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_cloudfront.CfnDistribution","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.aws_cloudfront.Distribution","version":"2.193.0","metadata":[{"defaultBehavior":{"origin":"*","viewerProtocolPolicy":"redirect-to-https"},"enableLogging":true,"logBucket":"*","defaultRootObject":"*"}]}}},"constructInfo":{"fqn":"@aws-solutions-constructs/aws-cloudfront-oai-s3.CloudFrontToOaiToS3","version":"2.85.0"}},"Integ":{"id":"Integ","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ","children":{"DefaultTest":{"id":"DefaultTest","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest","children":{"Default":{"id":"Default","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/Default","constructInfo":{"fqn":"constructs.Construct","version":"10.4.2"}},"DeployAssert":{"id":"DeployAssert","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/DeployAssert","children":{"BootstrapVersion":{"id":"BootstrapVersion","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/DeployAssert/BootstrapVersion","constructInfo":{"fqn":"aws-cdk-lib.CfnParameter","version":"2.193.0"}},"CheckBootstrapVersion":{"id":"CheckBootstrapVersion","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/Integ/DefaultTest/DeployAssert/CheckBootstrapVersion","constructInfo":{"fqn":"aws-cdk-lib.CfnRule","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.Stack","version":"2.193.0"}}},"constructInfo":{"fqn":"@aws-cdk/integ-tests-alpha.IntegTestCase","version":"2.193.0-alpha.0"}}},"constructInfo":{"fqn":"@aws-cdk/integ-tests-alpha.IntegTest","version":"2.193.0-alpha.0"}},"BootstrapVersion":{"id":"BootstrapVersion","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/BootstrapVersion","constructInfo":{"fqn":"aws-cdk-lib.CfnParameter","version":"2.193.0"}},"CheckBootstrapVersion":{"id":"CheckBootstrapVersion","path":"cftoais3-bucket-encrypted-with-managed-key-provided-as-existingbucket/CheckBootstrapVersion","constructInfo":{"fqn":"aws-cdk-lib.CfnRule","version":"2.193.0"}}},"constructInfo":{"fqn":"aws-cdk-lib.Stack","version":"2.193.0"}},"Tree":{"id":"Tree","path":"Tree","constructInfo":{"fqn":"constructs.Construct","version":"10.4.2"}}},"constructInfo":{"fqn":"aws-cdk-lib.App","version":"2.193.0"}}}