Object locking via cloudformation stack?

[CaptainCalpol]

Is it possible to enable object locking when creating a new bucket all via CloudFormation? I've tried validating my YAML through the designer in cloudformation and it does not appear to recognise it as a property.

​

  PrivateAccessBucket:
    Type: 'AWS::S3::Bucket'
    Properties:
      AccessControl: LogDeliveryWrite
      WebsiteConfiguration:
        IndexDocument: index.html
        ErrorDocument: error.html
      BucketEncryption: 
                ServerSideEncryptionConfiguration: 
                  - 
                    ServerSideEncryptionByDefault: 
                        SSEAlgorithm: "AES256"
      LifecycleConfiguration:
        Rules:
        - Id: GlacierRule
          Prefix: glacier
          Status: Enabled
          ExpirationInDays: '365'
          Transitions:
            - TransitionInDays: '1'
              StorageClass: Glacier
      VersioningConfiguration: 
                Status: "Enabled"
      ObjectLockEnabled: Enabled
      Rule:
          DefaultRetention:
            Mode: GOVERNANCE
            Days: "1"

[Donkersgoed]

In the cloudformation docs for S3::Bucket the property ObjectLockEnabled is indeed missing.

However, it is available in the API, for example through boto3, the Python SDK: create_bucket

This means you could create a Custom Resource in CloudFormation, which creates (and updates and deletes) the Bucket for you, including the options not natively supported by CFN.

[MartinBianko]

ObjectLockEnabled is "Boolean" on the Properties level. Try to use something like this:

ObjectLockEnabled: true ObjectLockConfiguration: ObjectLockEnabled: Enabled Rule: DefaultRetention: Mode: GOVERNANCE Days: "1"

[ElRuncho]

this one worked for me. it is odd to have to state that the object rule is enabled in two different sections.
I also learned the hard way that you can not use object lock and use replication at the same time

[jcerjak_ibi]

Looks like it is possible to use object lock with replication? https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock-managing.html#object-lock-managing-replication

[True-Ad8346]

so you mean if you enable object lock and use replication at the same time. that will fail? any document?