sst 2.8.9 → 2.8.10

package/constructs/Bucket.d.ts

@@ -170,16 +170,17 @@ export interface BucketProps {
      */
     cors?: boolean | BucketCorsRule[];
     /**
-     * Block public access to this bucket.
+     * Block public access to this bucket. Setting this to `true` alllows uploading objects with public ACLs.
+     * Note that setting to `true` does not necessarily mean that the bucket is completely accessible to the public. Rather, it enables the granting of public permissions through public ACLs.
      * @default false
      * @example
      * ```js
      * new Bucket(stack, "Bucket", {
-     *   blockPublicAccess: true,
+     *   blockPublicACLs: true,
      * });
      * ```
      */
-    blockPublicAccess?: boolean;
+    blockPublicACLs?: boolean;
     /**
      * The default function props to be applied to all the Lambda functions in the API. The `environment`, `permissions` and `layers` properties will be merged with per route definitions if they are defined.
      *
@@ -358,5 +359,6 @@ export declare class Bucket extends Construct implements SSTConstruct {
     private addFunctionNotification;
     private buildCorsConfig;
     private buildBlockPublicAccessConfig;
+    private buildObjectOwnershipConfig;
 }
 export {};

package/constructs/Bucket.js

@@ -4,7 +4,7 @@ import { Topic } from "./Topic.js";
 import { getFunctionRef, isCDKConstruct } from "./Construct.js";
 import { Function as Fn, } from "./Function.js";
 import { toCdkDuration } from "./util/duration.js";
-import { Bucket as CDKBucket, BlockPublicAccess, EventType, HttpMethods, } from "aws-cdk-lib/aws-s3";
+import { Bucket as CDKBucket, BlockPublicAccess, EventType, HttpMethods, ObjectOwnership, } from "aws-cdk-lib/aws-s3";
 import { LambdaDestination, SnsDestination, SqsDestination, } from "aws-cdk-lib/aws-s3-notifications";
 /////////////////////
 // Construct
@@ -171,7 +171,7 @@ export class Bucket extends Construct {
         };
     }
     createBucket() {
-        const { name, cors, blockPublicAccess, cdk } = this.props;
+        const { name, cors, blockPublicACLs, cdk } = this.props;
         if (isCDKConstruct(cdk?.bucket)) {
             if (cors !== undefined) {
                 throw new Error(`Cannot configure the "cors" when "cdk.bucket" is a construct`);
@@ -182,7 +182,8 @@ export class Bucket extends Construct {
             this.cdk.bucket = new CDKBucket(this, "Bucket", {
                 bucketName: name,
                 cors: this.buildCorsConfig(cors),
-                blockPublicAccess: this.buildBlockPublicAccessConfig(blockPublicAccess),
+                blockPublicAccess: this.buildBlockPublicAccessConfig(blockPublicACLs),
+                objectOwnership: this.buildObjectOwnershipConfig(blockPublicACLs),
                 ...cdk?.bucket,
             });
         }
@@ -314,9 +315,12 @@ export class Bucket extends Construct {
             ? BlockPublicAccess.BLOCK_ALL
             : new BlockPublicAccess({
                 blockPublicAcls: false,
-                blockPublicPolicy: false,
                 ignorePublicAcls: false,
-                restrictPublicBuckets: false,
             });
     }
+    buildObjectOwnershipConfig(config) {
+        return config === true
+            ? ObjectOwnership.BUCKET_OWNER_ENFORCED
+            : ObjectOwnership.BUCKET_OWNER_PREFERRED;
+    }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "sideEffects": false,
   "name": "sst",
-  "version": "2.8.9",
+  "version": "2.8.10",
   "bin": {
     "sst": "cli/sst.js"
   },