S3 Bucket

import { S3Bucket } from "@fjall/components-infrastructure/lib/resources/aws/storage/s3";

const bucket = new S3Bucket(this, "MyBucket", {
  bucketName: "my-secure-bucket",
});

const website = new S3Bucket(this, "MyWebsite", {
  bucketName: "my-website-bucket",
  websiteHosting: {
    indexDocument: "index.html",
    errorDocument: "error.html",
  },
});

const publicBucket = new S3Bucket(this, "PublicAssets", {
  bucketName: "my-public-assets",
  publicReadAccess: true,
});

const bucket = new S3Bucket(this, "AppBucket", {
  bucketName: "my-app-data",
  removalPolicy: RemovalPolicy.RETAIN,
  lifecycleRules: [
    {
      id: "delete-old-versions",
      noncurrentVersionExpiration: Duration.days(90),
    },
  ],
});

const website = new S3Bucket(this, "CorporateWebsite", {
  bucketName: "www.example.com",
  websiteHosting: {
    indexDocument: "index.html",
    errorDocument: "404.html",
  },
});

const assets = new S3Bucket(this, "PublicAssets", {
  bucketName: "assets.example.com",
  publicReadAccess: true,
  cors: [
    {
      allowedMethods: [HttpMethods.GET, HttpMethods.HEAD],
      allowedOrigins: ["*"],
      allowedHeaders: ["*"],
      maxAge: 3000,
    },
  ],
});

const bucket = new S3Bucket(this, "ResilientBucket", {
  backupVaultTier: "resilient",
});

const key = new Key(this, "BucketKey");

const bucket = new S3Bucket(this, "EncryptedBucket", {
  encryption: BucketEncryption.KMS,
  encryptionKey: key,
  bucketKeyEnabled: true,
});

const bucket = new S3Bucket(this, "ArchiveBucket", {
  lifecycleRules: [
    {
      id: "archive-old-objects",
      transitions: [
        {
          storageClass: StorageClass.INFREQUENT_ACCESS,
          transitionAfter: Duration.days(30),
        },
        {
          storageClass: StorageClass.GLACIER,
          transitionAfter: Duration.days(90),
        },
      ],
    },
    {
      id: "delete-old-versions",
      noncurrentVersionExpiration: Duration.days(180),
    },
  ],
});

const bucket = new S3Bucket(this, "ProcessingBucket");

bucket.addEventNotification(
  EventType.OBJECT_CREATED,
  new LambdaDestination(processorFunction),
  { prefix: "uploads/", suffix: ".csv" },
);

bucket.addEventNotification(
  EventType.OBJECT_REMOVED,
  new SqsDestination(deletionQueue),
);

const bucket = new S3Bucket(this, "PolicyBucket");

bucket.addToResourcePolicy(
  new PolicyStatement({
    actions: ["s3:GetObject"],
    resources: [bucket.arnForObjects("public/*")],
    principals: [new AnyPrincipal()],
    conditions: {
      IpAddress: {
        "aws:SourceIp": ["203.0.113.0/24"],
      },
    },
  }),
);

const bucket = new S3Bucket(this, "AppBucket");

// Grant read access
bucket.grantRead(role);

// Grant write access
bucket.grantWrite(role, "uploads/*");

// Grant full access
bucket.grantReadWrite(role);

const bucket = new S3Bucket(this, "APIBucket", {
  cors: [
    {
      allowedHeaders: ["Authorization", "Content-Type"],
      allowedMethods: [HttpMethods.GET, HttpMethods.PUT, HttpMethods.POST],
      allowedOrigins: ["https://app.example.com"],
      exposedHeaders: ["ETag"],
      maxAge: 3000,
    },
  ],
});

const logBucket = new S3Bucket(this, "LogBucket");

const bucket = new S3Bucket(this, "AppBucket", {
  serverAccessLogsBucket: logBucket,
  serverAccessLogsPrefix: "app-bucket-logs/",
});

import { S3Bucket } from "@fjall/components-infrastructure/lib/resources/aws/storage/s3";
import { Duration, RemovalPolicy } from "aws-cdk-lib";

const appBucket = new S3Bucket(this, "ApplicationStorage", {
  bucketName: `${props.appName}-storage-${props.environment}`,
  removalPolicy: RemovalPolicy.RETAIN,

  // Encryption
  encryption: BucketEncryption.S3_MANAGED,

  // Lifecycle
  lifecycleRules: [
    {
      id: "cleanup-incomplete-uploads",
      abortIncompleteMultipartUploadAfter: Duration.days(7),
    },
    {
      id: "archive-old-data",
      transitions: [
        {
          storageClass: StorageClass.INFREQUENT_ACCESS,
          transitionAfter: Duration.days(60),
        },
      ],
    },
  ],

  // CORS for web app
  cors: [
    {
      allowedHeaders: ["*"],
      allowedMethods: [HttpMethods.GET, HttpMethods.PUT],
      allowedOrigins: [props.appDomain],
      maxAge: 3600,
    },
  ],
});

// Grant app permissions
appRole.addToPolicy(
  new PolicyStatement({
    actions: ["s3:GetObject", "s3:PutObject"],
    resources: [appBucket.arnForObjects("user-uploads/*")],
  }),
);