Enable the management of bucket-level ACLs in amazon.aws.s3_bucket

[tomkivlin]

Summary

The AWS S3 API includes the ability to manage bucket-level ACL (not the public access blocks, but the ACLs themselves): https://awscli.amazonaws.com/v2/documentation/api/latest/reference/s3api/put-bucket-acl.html. e.g. the following will enable read-only access for everyone.

aws s3api put-bucket-acl --bucket MyBucket --grant-read uri=http://acs.amazonaws.com/groups/global/AllUsers

I can't work out how this part of the configuration can be applied through the amazon.aws.s3_bucket module.

Issue Type

Feature Idea

Component Name

amazon.aws.s3_bucket

Additional Information

# Create a bucket with public read-only access for all users
# Uses canned ACLs as per https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl
- amazon.aws.s3_bucket:
    name: mys3bucket
    state: present
    acl: public-read
    public_access:
        block_public_acls: false
        ignore_public_acls: false
        block_public_policy: false
        restrict_public_buckets: false

Code of Conduct

• I agree to follow the Ansible Code of Conduct

[abikouo]

Hi @tomkivlin

The following feature has been merged into main branch, please feel free to test it and give feedback.

Regards
Aubin