configure bucket key by default in thé analytics bucket (#413)

awslabs · Feb 13, 2024 · 5dd771e · 5dd771e
1 parent 3f2ea17
commit 5dd771e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/framework/src/storage/lib/analytics-bucket.ts b/framework/src/storage/lib/analytics-bucket.ts
@@ -47,6 +47,7 @@ export class AnalyticsBucket extends Bucket {
       blockPublicAccess: props?.blockPublicAccess || BlockPublicAccess.BLOCK_ALL,
       enforceSSL: true,
       encryption: BucketEncryption.KMS,
+      bucketKeyEnabled: true,
       lifecycleRules: props?.lifecycleRules?.concat(AnalyticsBucket.LIFECYCLE_RULE) || AnalyticsBucket.LIFECYCLE_RULE,
       removalPolicy,
       serverAccessLogsPrefix: props?.serverAccessLogsPrefix || bucketName,

diff --git a/framework/test/unit/storage/analytics-bucket.test.ts b/framework/test/unit/storage/analytics-bucket.test.ts
@@ -39,6 +39,7 @@ describe('AnalyticsBucket Construct with default configuration', () => {
           BucketEncryption: {
             ServerSideEncryptionConfiguration: [
               {
+                BucketKeyEnabled: true,
                 ServerSideEncryptionByDefault: {
                   SSEAlgorithm: 'aws:kms',
                 },