Class IBucket.Jsii$Proxy
- All Implemented Interfaces:
IResource
,IResource.Jsii$Default
,IBucket
,IBucket.Jsii$Default
,software.amazon.jsii.JsiiSerializable
,software.constructs.IConstruct
,software.constructs.IConstruct.Jsii$Default
,software.constructs.IDependable
,software.constructs.IDependable.Jsii$Default
- Enclosing interface:
- IBucket
-
Nested Class Summary
Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationMode
Nested classes/interfaces inherited from interface software.amazon.awscdk.services.s3.IBucket
IBucket.Jsii$Default, IBucket.Jsii$Proxy
Nested classes/interfaces inherited from interface software.constructs.IConstruct
software.constructs.IConstruct.Jsii$Default, software.constructs.IConstruct.Jsii$Proxy
Nested classes/interfaces inherited from interface software.constructs.IDependable
software.constructs.IDependable.Jsii$Default, software.constructs.IDependable.Jsii$Proxy
Nested classes/interfaces inherited from interface software.amazon.awscdk.IResource
IResource.Jsii$Default, IResource.Jsii$Proxy
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionfinal void
addEventNotification
(EventType event, IBucketNotificationDestination dest, @NotNull NotificationKeyFilter... filters) Adds a bucket notification event destination.final void
addObjectCreatedNotification
(IBucketNotificationDestination dest, @NotNull NotificationKeyFilter... filters) Subscribes a destination to receive notifications when an object is created in the bucket.final void
addObjectRemovedNotification
(IBucketNotificationDestination dest, @NotNull NotificationKeyFilter... filters) Subscribes a destination to receive notifications when an object is removed from the bucket.addToResourcePolicy
(PolicyStatement permission) Adds a statement to the resource policy for a principal (i.e.final void
applyRemovalPolicy
(RemovalPolicy policy) Apply the given removal policy to this resource.final String
arnForObjects
(String keyPattern) Returns an ARN that represents all objects within the bucket that match the key pattern specified.final void
Enables event bridge notification, causing all events below to be sent to EventBridge:.final String
The ARN of the bucket.final String
The IPv4 DNS name of the specified bucket.final String
The IPv6 DNS name of the specified bucket.final String
The name of the bucket.final String
The regional domain name of the specified bucket.final String
The Domain name of the static website.final String
The URL of the static website.final IKey
Optional KMS encryption key associated with this bucket.final ResourceEnvironment
getEnv()
The environment this resource belongs to.final Boolean
If this bucket has been configured for static website hosting.final software.constructs.Node
getNode()
The tree node.final BucketPolicy
The resource policy associated with this bucket.final Stack
getStack()
The stack in which this resource is defined.final Grant
grantDelete
(IGrantable identity) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.final Grant
grantDelete
(IGrantable identity, Object objectsKeyPattern) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.final Grant
grantPublicAccess
(String keyPrefix, @NotNull String... allowedActions) Allows unrestricted access to objects from this bucket.final Grant
grantPut
(IGrantable identity) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.final Grant
grantPut
(IGrantable identity, Object objectsKeyPattern) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.final Grant
grantPutAcl
(IGrantable identity) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.final Grant
grantPutAcl
(IGrantable identity, String objectsKeyPattern) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.final Grant
grantRead
(IGrantable identity) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).final Grant
grantRead
(IGrantable identity, Object objectsKeyPattern) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).final Grant
grantReadWrite
(IGrantable identity) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).final Grant
grantReadWrite
(IGrantable identity, Object objectsKeyPattern) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).final Grant
grantWrite
(IGrantable identity) Grant write permissions to this bucket to an IAM principal.final Grant
grantWrite
(IGrantable identity, Object objectsKeyPattern) Grant write permissions to this bucket to an IAM principal.final Grant
grantWrite
(IGrantable identity, Object objectsKeyPattern, List<String> allowedActionPatterns) Grant write permissions to this bucket to an IAM principal.final Rule
Defines a CloudWatch event that triggers when something happens to this bucket.final Rule
onCloudTrailEvent
(String id, OnCloudTrailBucketEventOptions options) Defines a CloudWatch event that triggers when something happens to this bucket.final Rule
Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.final Rule
onCloudTrailPutObject
(String id, OnCloudTrailBucketEventOptions options) Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.final Rule
Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.final Rule
onCloudTrailWriteObject
(String id, OnCloudTrailBucketEventOptions options) Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.final String
The S3 URL of an S3 object.final String
s3UrlForObject
(String key) The S3 URL of an S3 object.final void
setPolicy
(BucketPolicy value) The resource policy associated with this bucket.final String
The https Transfer Acceleration URL of an S3 object.final String
The https Transfer Acceleration URL of an S3 object.final String
The https Transfer Acceleration URL of an S3 object.final String
The https URL of an S3 object.final String
urlForObject
(String key) The https URL of an S3 object.final String
The virtual hosted-style URL of an S3 object.final String
The virtual hosted-style URL of an S3 object.final String
virtualHostedUrlForObject
(String key, VirtualHostedStyleUrlOptions options) The virtual hosted-style URL of an S3 object.Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Constructor Details
-
Jsii$Proxy
protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
-
-
Method Details
-
getNode
@Stability(Stable) @NotNull public final software.constructs.Node getNode()The tree node.- Specified by:
getNode
in interfaceIBucket.Jsii$Default
- Specified by:
getNode
in interfacesoftware.constructs.IConstruct
- Specified by:
getNode
in interfacesoftware.constructs.IConstruct.Jsii$Default
- Specified by:
getNode
in interfaceIResource.Jsii$Default
-
getEnv
The environment this resource belongs to.For resources that are created and managed by the CDK (generally, those created by creating new class instances like Role, Bucket, etc.), this is always the same as the environment of the stack they belong to; however, for imported resources (those obtained from static methods like fromRoleArn, fromBucketName, etc.), that might be different than the stack they were imported into.
- Specified by:
getEnv
in interfaceIBucket.Jsii$Default
- Specified by:
getEnv
in interfaceIResource
- Specified by:
getEnv
in interfaceIResource.Jsii$Default
-
getStack
The stack in which this resource is defined.- Specified by:
getStack
in interfaceIBucket.Jsii$Default
- Specified by:
getStack
in interfaceIResource
- Specified by:
getStack
in interfaceIResource.Jsii$Default
-
getBucketArn
The ARN of the bucket.- Specified by:
getBucketArn
in interfaceIBucket
- Specified by:
getBucketArn
in interfaceIBucket.Jsii$Default
-
getBucketDomainName
The IPv4 DNS name of the specified bucket.- Specified by:
getBucketDomainName
in interfaceIBucket
- Specified by:
getBucketDomainName
in interfaceIBucket.Jsii$Default
-
getBucketDualStackDomainName
The IPv6 DNS name of the specified bucket.- Specified by:
getBucketDualStackDomainName
in interfaceIBucket
- Specified by:
getBucketDualStackDomainName
in interfaceIBucket.Jsii$Default
-
getBucketName
The name of the bucket.- Specified by:
getBucketName
in interfaceIBucket
- Specified by:
getBucketName
in interfaceIBucket.Jsii$Default
-
getBucketRegionalDomainName
The regional domain name of the specified bucket.- Specified by:
getBucketRegionalDomainName
in interfaceIBucket
- Specified by:
getBucketRegionalDomainName
in interfaceIBucket.Jsii$Default
-
getBucketWebsiteDomainName
The Domain name of the static website.- Specified by:
getBucketWebsiteDomainName
in interfaceIBucket
- Specified by:
getBucketWebsiteDomainName
in interfaceIBucket.Jsii$Default
-
getBucketWebsiteUrl
The URL of the static website.- Specified by:
getBucketWebsiteUrl
in interfaceIBucket
- Specified by:
getBucketWebsiteUrl
in interfaceIBucket.Jsii$Default
-
getEncryptionKey
Optional KMS encryption key associated with this bucket.- Specified by:
getEncryptionKey
in interfaceIBucket
- Specified by:
getEncryptionKey
in interfaceIBucket.Jsii$Default
-
getIsWebsite
If this bucket has been configured for static website hosting.- Specified by:
getIsWebsite
in interfaceIBucket
- Specified by:
getIsWebsite
in interfaceIBucket.Jsii$Default
-
getPolicy
The resource policy associated with this bucket.If
autoCreatePolicy
is true, aBucketPolicy
will be created upon the first call to addToResourcePolicy(s).- Specified by:
getPolicy
in interfaceIBucket
- Specified by:
getPolicy
in interfaceIBucket.Jsii$Default
-
setPolicy
The resource policy associated with this bucket.If
autoCreatePolicy
is true, aBucketPolicy
will be created upon the first call to addToResourcePolicy(s).- Specified by:
setPolicy
in interfaceIBucket
- Specified by:
setPolicy
in interfaceIBucket.Jsii$Default
-
applyRemovalPolicy
Apply the given removal policy to this resource.The Removal Policy controls what happens to this resource when it stops being managed by CloudFormation, either because you've removed it from the CDK application or because you've made a change that requires the resource to be replaced.
The resource can be deleted (
RemovalPolicy.DESTROY
), or left in your AWS account for data recovery and cleanup later (RemovalPolicy.RETAIN
).- Specified by:
applyRemovalPolicy
in interfaceIBucket.Jsii$Default
- Specified by:
applyRemovalPolicy
in interfaceIResource
- Specified by:
applyRemovalPolicy
in interfaceIResource.Jsii$Default
- Parameters:
policy
- This parameter is required.
-
addEventNotification
@Stability(Stable) public final void addEventNotification(@NotNull EventType event, @NotNull IBucketNotificationDestination dest, @NotNull @NotNull NotificationKeyFilter... filters) Adds a bucket notification event destination.Example:
Function myLambda; Bucket bucket = new Bucket(this, "MyBucket"); bucket.addEventNotification(EventType.OBJECT_CREATED, new LambdaDestination(myLambda), NotificationKeyFilter.builder().prefix("home/myusername/*").build());
- Specified by:
addEventNotification
in interfaceIBucket
- Specified by:
addEventNotification
in interfaceIBucket.Jsii$Default
- Parameters:
event
- The event to trigger the notification. This parameter is required.dest
- The notification destination (Lambda, SNS Topic or SQS Queue). This parameter is required.filters
- S3 object key filter rules to determine which objects trigger this event. This parameter is required.- See Also:
-
addObjectCreatedNotification
@Stability(Stable) public final void addObjectCreatedNotification(@NotNull IBucketNotificationDestination dest, @NotNull @NotNull NotificationKeyFilter... filters) Subscribes a destination to receive notifications when an object is created in the bucket.This is identical to calling
onEvent(s3.EventType.OBJECT_CREATED)
.- Specified by:
addObjectCreatedNotification
in interfaceIBucket
- Specified by:
addObjectCreatedNotification
in interfaceIBucket.Jsii$Default
- Parameters:
dest
- The notification destination (see onEvent). This parameter is required.filters
- Filters (see onEvent). This parameter is required.
-
addObjectRemovedNotification
@Stability(Stable) public final void addObjectRemovedNotification(@NotNull IBucketNotificationDestination dest, @NotNull @NotNull NotificationKeyFilter... filters) Subscribes a destination to receive notifications when an object is removed from the bucket.This is identical to calling
onEvent(EventType.OBJECT_REMOVED)
.- Specified by:
addObjectRemovedNotification
in interfaceIBucket
- Specified by:
addObjectRemovedNotification
in interfaceIBucket.Jsii$Default
- Parameters:
dest
- The notification destination (see onEvent). This parameter is required.filters
- Filters (see onEvent). This parameter is required.
-
addToResourcePolicy
@Stability(Stable) @NotNull public final AddToResourcePolicyResult addToResourcePolicy(@NotNull PolicyStatement permission) Adds a statement to the resource policy for a principal (i.e. account/role/service) to perform actions on this bucket and/or its contents. UsebucketArn
andarnForObjects(keys)
to obtain ARNs for this bucket or objects.Note that the policy statement may or may not be added to the policy. For example, when an
IBucket
is created from an existing bucket, it's not possible to tell whether the bucket already has a policy attached, let alone to re-use that policy to add more statements to it. So it's safest to do nothing in these cases.- Specified by:
addToResourcePolicy
in interfaceIBucket
- Specified by:
addToResourcePolicy
in interfaceIBucket.Jsii$Default
- Parameters:
permission
- the policy statement to be added to the bucket's policy. This parameter is required.- Returns:
- metadata about the execution of this method. If the policy
was not added, the value of
statementAdded
will befalse
. You should always check this value to make sure that the operation was actually carried out. Otherwise, synthesis and deploy will terminate silently, which may be confusing.
-
arnForObjects
Returns an ARN that represents all objects within the bucket that match the key pattern specified.To represent all keys, specify
"*"
.- Specified by:
arnForObjects
in interfaceIBucket
- Specified by:
arnForObjects
in interfaceIBucket.Jsii$Default
- Parameters:
keyPattern
- This parameter is required.
-
enableEventBridgeNotification
@Stability(Stable) public final void enableEventBridgeNotification()Enables event bridge notification, causing all events below to be sent to EventBridge:.- Object Deleted (DeleteObject)
- Object Deleted (Lifecycle expiration)
- Object Restore Initiated
- Object Restore Completed
- Object Restore Expired
- Object Storage Class Changed
- Object Access Tier Changed
- Object ACL Updated
- Object Tags Added
- Object Tags Deleted
- Specified by:
enableEventBridgeNotification
in interfaceIBucket
- Specified by:
enableEventBridgeNotification
in interfaceIBucket.Jsii$Default
-
grantDelete
@Stability(Stable) @NotNull public final Grant grantDelete(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern) Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.- Specified by:
grantDelete
in interfaceIBucket
- Specified by:
grantDelete
in interfaceIBucket.Jsii$Default
- Parameters:
identity
- The principal. This parameter is required.objectsKeyPattern
- Restrict the permission to a certain key pattern (default '*').
-
grantDelete
Grants s3:DeleteObject* permission to an IAM principal for objects in this bucket.- Specified by:
grantDelete
in interfaceIBucket
- Parameters:
identity
- The principal. This parameter is required.
-
grantPublicAccess
@Stability(Stable) @NotNull public final Grant grantPublicAccess(@Nullable String keyPrefix, @NotNull @NotNull String... allowedActions) Allows unrestricted access to objects from this bucket.IMPORTANT: This permission allows anyone to perform actions on S3 objects in this bucket, which is useful for when you configure your bucket as a website and want everyone to be able to read objects in the bucket without needing to authenticate.
Without arguments, this method will grant read ("s3:GetObject") access to all objects ("*") in the bucket.
The method returns the
iam.Grant
object, which can then be modified as needed. For example, you can add a condition that will restrict access only to an IPv4 range like this:const grant = bucket.grantPublicAccess(); grant.resourceStatement!.addCondition(‘IpAddress’, { “aws:SourceIp”: “54.240.143.0/24” });
- Specified by:
grantPublicAccess
in interfaceIBucket
- Specified by:
grantPublicAccess
in interfaceIBucket.Jsii$Default
- Parameters:
keyPrefix
- the prefix of S3 object keys (e.g.home/*
). Default is "*".allowedActions
- the set of S3 actions to allow. This parameter is required.- Returns:
- The
iam.PolicyStatement
object, which can be used to apply e.g. conditions.
-
grantPut
@Stability(Stable) @NotNull public final Grant grantPut(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern) Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
- Specified by:
grantPut
in interfaceIBucket
- Specified by:
grantPut
in interfaceIBucket.Jsii$Default
- Parameters:
identity
- The principal. This parameter is required.objectsKeyPattern
- Restrict the permission to a certain key pattern (default '*').
-
grantPut
Grants s3:PutObject* and s3:Abort* permissions for this bucket to an IAM principal.If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
-
grantPutAcl
@Stability(Stable) @NotNull public final Grant grantPutAcl(@NotNull IGrantable identity, @Nullable String objectsKeyPattern) Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.If your application has the '@aws-cdk/aws-s3:grantWriteWithoutAcl' feature flag set, calling
grantWrite
orgrantReadWrite
no longer grants permissions to modify the ACLs of the objects; in this case, if you need to modify object ACLs, call this method explicitly.- Specified by:
grantPutAcl
in interfaceIBucket
- Specified by:
grantPutAcl
in interfaceIBucket.Jsii$Default
- Parameters:
identity
- The principal. This parameter is required.objectsKeyPattern
- Restrict the permission to a certain key pattern (default '*').
-
grantPutAcl
Grant the given IAM identity permissions to modify the ACLs of objects in the given Bucket.If your application has the '@aws-cdk/aws-s3:grantWriteWithoutAcl' feature flag set, calling
grantWrite
orgrantReadWrite
no longer grants permissions to modify the ACLs of the objects; in this case, if you need to modify object ACLs, call this method explicitly.- Specified by:
grantPutAcl
in interfaceIBucket
- Parameters:
identity
- The principal. This parameter is required.
-
grantRead
@Stability(Stable) @NotNull public final Grant grantRead(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern) Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).If encryption is used, permission to use the key to decrypt the contents of the bucket will also be granted to the same principal.
- Specified by:
grantRead
in interfaceIBucket
- Specified by:
grantRead
in interfaceIBucket.Jsii$Default
- Parameters:
identity
- The principal. This parameter is required.objectsKeyPattern
- Restrict the permission to a certain key pattern (default '*').
-
grantRead
Grant read permissions for this bucket and it's contents to an IAM principal (Role/Group/User).If encryption is used, permission to use the key to decrypt the contents of the bucket will also be granted to the same principal.
-
grantReadWrite
@Stability(Stable) @NotNull public final Grant grantReadWrite(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern) Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).If an encryption key is used, permission to use the key for encrypt/decrypt will also be granted.
Before CDK version 1.85.0, this method granted the
s3:PutObject*
permission that includeds3:PutObjectAcl
, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the@aws-cdk/aws-s3:grantWriteWithoutAcl
feature flag is set totrue
in thecontext
key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use thegrantPutAcl
method.- Specified by:
grantReadWrite
in interfaceIBucket
- Specified by:
grantReadWrite
in interfaceIBucket.Jsii$Default
- Parameters:
identity
- The principal. This parameter is required.objectsKeyPattern
- Restrict the permission to a certain key pattern (default '*').
-
grantReadWrite
Grants read/write permissions for this bucket and it's contents to an IAM principal (Role/Group/User).If an encryption key is used, permission to use the key for encrypt/decrypt will also be granted.
Before CDK version 1.85.0, this method granted the
s3:PutObject*
permission that includeds3:PutObjectAcl
, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the@aws-cdk/aws-s3:grantWriteWithoutAcl
feature flag is set totrue
in thecontext
key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use thegrantPutAcl
method.- Specified by:
grantReadWrite
in interfaceIBucket
- Parameters:
identity
- The principal. This parameter is required.
-
grantWrite
@Stability(Stable) @NotNull public final Grant grantWrite(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern, @Nullable List<String> allowedActionPatterns) Grant write permissions to this bucket to an IAM principal.If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
Before CDK version 1.85.0, this method granted the
s3:PutObject*
permission that includeds3:PutObjectAcl
, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the@aws-cdk/aws-s3:grantWriteWithoutAcl
feature flag is set totrue
in thecontext
key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use thegrantPutAcl
method.- Specified by:
grantWrite
in interfaceIBucket
- Specified by:
grantWrite
in interfaceIBucket.Jsii$Default
- Parameters:
identity
- The principal. This parameter is required.objectsKeyPattern
- Restrict the permission to a certain key pattern (default '*').allowedActionPatterns
- Restrict the permissions to certain list of action patterns.
-
grantWrite
@Stability(Stable) @NotNull public final Grant grantWrite(@NotNull IGrantable identity, @Nullable Object objectsKeyPattern) Grant write permissions to this bucket to an IAM principal.If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
Before CDK version 1.85.0, this method granted the
s3:PutObject*
permission that includeds3:PutObjectAcl
, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the@aws-cdk/aws-s3:grantWriteWithoutAcl
feature flag is set totrue
in thecontext
key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use thegrantPutAcl
method.- Specified by:
grantWrite
in interfaceIBucket
- Parameters:
identity
- The principal. This parameter is required.objectsKeyPattern
- Restrict the permission to a certain key pattern (default '*').
-
grantWrite
Grant write permissions to this bucket to an IAM principal.If encryption is used, permission to use the key to encrypt the contents of written files will also be granted to the same principal.
Before CDK version 1.85.0, this method granted the
s3:PutObject*
permission that includeds3:PutObjectAcl
, which could be used to grant read/write object access to IAM principals in other accounts. If you want to get rid of that behavior, update your CDK version to 1.85.0 or later, and make sure the@aws-cdk/aws-s3:grantWriteWithoutAcl
feature flag is set totrue
in thecontext
key of your cdk.json file. If you've already updated, but still need the principal to have permissions to modify the ACLs, use thegrantPutAcl
method.- Specified by:
grantWrite
in interfaceIBucket
- Parameters:
identity
- The principal. This parameter is required.
-
onCloudTrailEvent
@Stability(Stable) @NotNull public final Rule onCloudTrailEvent(@NotNull String id, @Nullable OnCloudTrailBucketEventOptions options) Defines a CloudWatch event that triggers when something happens to this bucket.Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
- Specified by:
onCloudTrailEvent
in interfaceIBucket
- Specified by:
onCloudTrailEvent
in interfaceIBucket.Jsii$Default
- Parameters:
id
- The id of the rule. This parameter is required.options
- Options for adding the rule.
-
onCloudTrailEvent
Defines a CloudWatch event that triggers when something happens to this bucket.Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
- Specified by:
onCloudTrailEvent
in interfaceIBucket
- Parameters:
id
- The id of the rule. This parameter is required.
-
onCloudTrailPutObject
@Stability(Stable) @NotNull public final Rule onCloudTrailPutObject(@NotNull String id, @Nullable OnCloudTrailBucketEventOptions options) Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.Note that some tools like
aws s3 cp
will automatically use either PutObject or the multipart upload API depending on the file size, so usingonCloudTrailWriteObject
may be preferable.Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
- Specified by:
onCloudTrailPutObject
in interfaceIBucket
- Specified by:
onCloudTrailPutObject
in interfaceIBucket.Jsii$Default
- Parameters:
id
- The id of the rule. This parameter is required.options
- Options for adding the rule.
-
onCloudTrailPutObject
Defines an AWS CloudWatch event that triggers when an object is uploaded to the specified paths (keys) in this bucket using the PutObject API call.Note that some tools like
aws s3 cp
will automatically use either PutObject or the multipart upload API depending on the file size, so usingonCloudTrailWriteObject
may be preferable.Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
- Specified by:
onCloudTrailPutObject
in interfaceIBucket
- Parameters:
id
- The id of the rule. This parameter is required.
-
onCloudTrailWriteObject
@Stability(Stable) @NotNull public final Rule onCloudTrailWriteObject(@NotNull String id, @Nullable OnCloudTrailBucketEventOptions options) Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.This includes the events PutObject, CopyObject, and CompleteMultipartUpload.
Note that some tools like
aws s3 cp
will automatically use either PutObject or the multipart upload API depending on the file size, so using this method may be preferable toonCloudTrailPutObject
.Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
- Specified by:
onCloudTrailWriteObject
in interfaceIBucket
- Specified by:
onCloudTrailWriteObject
in interfaceIBucket.Jsii$Default
- Parameters:
id
- The id of the rule. This parameter is required.options
- Options for adding the rule.
-
onCloudTrailWriteObject
Defines an AWS CloudWatch event that triggers when an object at the specified paths (keys) in this bucket are written to.This includes the events PutObject, CopyObject, and CompleteMultipartUpload.
Note that some tools like
aws s3 cp
will automatically use either PutObject or the multipart upload API depending on the file size, so using this method may be preferable toonCloudTrailPutObject
.Requires that there exists at least one CloudTrail Trail in your account that captures the event. This method will not create the Trail.
- Specified by:
onCloudTrailWriteObject
in interfaceIBucket
- Parameters:
id
- The id of the rule. This parameter is required.
-
s3UrlForObject
The S3 URL of an S3 object.For example:
s3://onlybucket
s3://bucket/key
- Specified by:
s3UrlForObject
in interfaceIBucket
- Specified by:
s3UrlForObject
in interfaceIBucket.Jsii$Default
- Parameters:
key
- The S3 key of the object.- Returns:
- an ObjectS3Url token
-
s3UrlForObject
The S3 URL of an S3 object.For example:
s3://onlybucket
s3://bucket/key
- Specified by:
s3UrlForObject
in interfaceIBucket
- Returns:
- an ObjectS3Url token
-
transferAccelerationUrlForObject
@Stability(Stable) @NotNull public final String transferAccelerationUrlForObject(@Nullable String key, @Nullable TransferAccelerationUrlOptions options) The https Transfer Acceleration URL of an S3 object.Specify
dualStack: true
at the options for dual-stack endpoint (connect to the bucket over IPv6). For example:https://bucket.s3-accelerate.amazonaws.com
https://bucket.s3-accelerate.amazonaws.com/key
- Specified by:
transferAccelerationUrlForObject
in interfaceIBucket
- Specified by:
transferAccelerationUrlForObject
in interfaceIBucket.Jsii$Default
- Parameters:
key
- The S3 key of the object.options
- Options for generating URL.- Returns:
- an TransferAccelerationUrl token
-
transferAccelerationUrlForObject
@Stability(Stable) @NotNull public final String transferAccelerationUrlForObject(@Nullable String key) The https Transfer Acceleration URL of an S3 object.Specify
dualStack: true
at the options for dual-stack endpoint (connect to the bucket over IPv6). For example:https://bucket.s3-accelerate.amazonaws.com
https://bucket.s3-accelerate.amazonaws.com/key
- Specified by:
transferAccelerationUrlForObject
in interfaceIBucket
- Parameters:
key
- The S3 key of the object.- Returns:
- an TransferAccelerationUrl token
-
transferAccelerationUrlForObject
The https Transfer Acceleration URL of an S3 object.Specify
dualStack: true
at the options for dual-stack endpoint (connect to the bucket over IPv6). For example:https://bucket.s3-accelerate.amazonaws.com
https://bucket.s3-accelerate.amazonaws.com/key
- Specified by:
transferAccelerationUrlForObject
in interfaceIBucket
- Returns:
- an TransferAccelerationUrl token
-
urlForObject
The https URL of an S3 object. For example:.https://s3.us-west-1.amazonaws.com/onlybucket
https://s3.us-west-1.amazonaws.com/bucket/key
https://s3.cn-north-1.amazonaws.com.cn/china-bucket/mykey
- Specified by:
urlForObject
in interfaceIBucket
- Specified by:
urlForObject
in interfaceIBucket.Jsii$Default
- Parameters:
key
- The S3 key of the object.- Returns:
- an ObjectS3Url token
-
urlForObject
The https URL of an S3 object. For example:.https://s3.us-west-1.amazonaws.com/onlybucket
https://s3.us-west-1.amazonaws.com/bucket/key
https://s3.cn-north-1.amazonaws.com.cn/china-bucket/mykey
- Specified by:
urlForObject
in interfaceIBucket
- Returns:
- an ObjectS3Url token
-
virtualHostedUrlForObject
@Stability(Stable) @NotNull public final String virtualHostedUrlForObject(@Nullable String key, @Nullable VirtualHostedStyleUrlOptions options) The virtual hosted-style URL of an S3 object. Specifyregional: false
at the options for non-regional URL. For example:.https://only-bucket.s3.us-west-1.amazonaws.com
https://bucket.s3.us-west-1.amazonaws.com/key
https://bucket.s3.amazonaws.com/key
https://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykey
- Specified by:
virtualHostedUrlForObject
in interfaceIBucket
- Specified by:
virtualHostedUrlForObject
in interfaceIBucket.Jsii$Default
- Parameters:
key
- The S3 key of the object.options
- Options for generating URL.- Returns:
- an ObjectS3Url token
-
virtualHostedUrlForObject
The virtual hosted-style URL of an S3 object. Specifyregional: false
at the options for non-regional URL. For example:.https://only-bucket.s3.us-west-1.amazonaws.com
https://bucket.s3.us-west-1.amazonaws.com/key
https://bucket.s3.amazonaws.com/key
https://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykey
- Specified by:
virtualHostedUrlForObject
in interfaceIBucket
- Parameters:
key
- The S3 key of the object.- Returns:
- an ObjectS3Url token
-
virtualHostedUrlForObject
The virtual hosted-style URL of an S3 object. Specifyregional: false
at the options for non-regional URL. For example:.https://only-bucket.s3.us-west-1.amazonaws.com
https://bucket.s3.us-west-1.amazonaws.com/key
https://bucket.s3.amazonaws.com/key
https://china-bucket.s3.cn-north-1.amazonaws.com.cn/mykey
- Specified by:
virtualHostedUrlForObject
in interfaceIBucket
- Returns:
- an ObjectS3Url token
-