How can I enable server side encryption on the bucket created by s3_event?

chrisortman · September 5, 2019, 11:34am

I can’t find where the bucket is actually created. It looks like maybe BucketConfigurator? If so I don’t see a way to pass that configuration to it.

tung · September 7, 2019, 4:22pm

The s3 bucket is created here:

github.com

tongueroo/jets/blob/f77a754/lib/jets/commands/deploy.rb#L63


#   https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-core/lib/aws-sdk-core/plugins/retry_errors.rb
#   https://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html
#
def aws_config_update!
  Aws.config.update(
    retry_limit: 7, # default: 3
    retry_base_delay: 0.6, # default: 0.3
  )
end


def create_s3_event_buckets
  buckets = Jets::Job::Base.s3_events.keys
  buckets.each do |bucket|
    Jets::AwsServices::S3Bucket.ensure_exists(bucket)
  end
end


def delete_minimal_stack
  puts "Existing stack is in ROLLBACK_COMPLETE state from a previous failed minimal deploy. Deleting stack and continuing."
  cfn.delete_stack(stack_name: stack_name)
  status.wait

Jets creates s3_event buckets outside of CloudFormation by design. It only creates the bucket if it doesn’t already exists.

There is currently no Jets setting to create the bucket with encryption enabled. Will consider PRs for this though. Would probably make it a global setting like the bucket_configuration settings. Thinking would only run it at bucket creation time and document that behavior.

Right now would just enable encryption on the bucket outside of Jets.