Releases: k9securityio/k9-cdk
Releases · k9securityio/k9-cdk
v2.0.15
v2.0.14
v2.0.13
v2.0.12
Make S3 Server-side Encryption enforcement optional (Details: #27).
The K9BucketPolicyProps
interface now supports an optional enforceEncryptionAtRest
option, which is handled as true
by default.
So if you want to disable enforcing encryption on the S3:PutObject
API request, you can configure the props like:
const k9BucketPolicyProps: K9BucketPolicyProps = {
bucket: bucket,
enforceEncryptionAtRest: false, // disable enforcing server-side encryption configuration
k9DesiredAccess: new Array<IAccessSpec>(
{
accessCapabilities: AccessCapability.ADMINISTER_RESOURCE,
allowPrincipalArns: administerResourceArns,
},
// ... snip...
),
};