amazon-s3 - 无法将通知配置添加到 s3 存储桶

Question

创建云形成模板以创建带有通知的存储桶。

以下是代码:

AWSTemplateFormatVersion: '2010-09-09'

Parameters:
  CBRS3ToS3IADelay:
    Description: Number of days before an S3 object is transitioned from S3 to S3-IA
    Type: Number
    Default: 365
  CBRS3ToGlacierDelay:
    Description: Number of days before an S3-IA object is transitioned from S3-IA to Glacier.
    Type: Number
    Default: 1460
  CBRBucketName:
    Description: S3 bucket name
    Type: String
    Default: "my-bucket-test0011"

Resources:
  CBRS3Bucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName:
        Ref: CBRBucketName
      AccessControl: Private
      LifecycleConfiguration:
        Rules:
          - Id: CbrCertReportGlacierArchiveRule
            Status: Enabled
            Transitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: !Ref CBRS3ToS3IADelay
              - StorageClass: GLACIER
                TransitionInDays: !Ref CBRS3ToGlacierDelay
      NotificationConfiguration:
        LambdaConfigurations:
          -
            Function: "arn:aws:lambda:xxxx:xxxx:function:xxxx"
            Event: "s3:ObjectCreated:Put"
            Filter:
              S3Key:
                Rules:
                  -
                    Name: suffix
                    Value: ".gz"
      Tags:
        - Key: PRODUCT
          Value: CRAWS
      VersioningConfiguration:
        Status: Enabled

使用通知 block 的代码。 但上述模板不适用于通知。

出现以下错误:

Unable to validate the following destination configurations (Service: Amazon S3; Status Code: 400; Error Code: InvalidArgument

我可以从控制台执行操作。

有人帮我解决这个问题吗？

Answer 1

这已经晚了，所以更多的是回答我自己的这个问题(刚刚设法解决同样的问题):由于对 s3 调用该 lambda 函数的初步检查而失败，我们需要这个:

  CBRS3BucketCanInvokeFunctionX:
    Type: 'AWS::Lambda::Permission'
    Properties:
      FunctionName: ARN_OF_FUNCTION_X
      Action: 'lambda:InvokeFunction'
      Principal: s3.amazonaws.com
      SourceAccount: !Ref 'AWS::AccountId'
      SourceArn: !Sub 'arn:aws:s3:::${CBRBucketName}'

您的 CBRS3Bucket 还需要先运行上述资源:

  CBRS3Bucket:
    Type: AWS::S3::Bucket
    DependsOn: CBRS3BucketCanInvokeFunctionX