Skip to content

stratiformdigital/serverless-s3-security-helper

Repository files navigation

serverless-s3-security-helper

Sets security related settings on s3 buckets.

latest release npm latest version Maintainability semantic-release: angular Dependabot code style: prettier

Usage

...

plugins:
  - serverless-s3-security-helper

...

Background

This plugin set settings on all S3 buckets. These are settings that are commonly required for security compliance. It handles severless deployment buckets as well as buckets created by a service.

Currently, the plugin:

  • enables versioning for objects
  • blocks all public access on the bucket, by default

This plugin has two hooks:

  • package:createDeploymentArtifacts
  • package:compileEvents

At each step, the buckets are set to be configured properly. This ensures the serverless deployment bucket is configured properly throughout its entire lifecycle.

License

License: MIT

See LICENSE for full details.