cloudformation.yml

AWSTemplateFormatVersion: '2010-09-09'
Description: Bucket for storing bundle information allow with a user to access it

Resources:
  BundleStatsBucket:
    Type: AWS::S3::Bucket
    DeletionPolicy: Retain
    UpdateReplacePolicy: Retain
    Properties:
      CorsConfiguration:
        CorsRules:
          - AllowedHeaders: ['*']
            AllowedMethods: [GET, HEAD]
            AllowedOrigins: ['*']
            ExposedHeaders: [Content-Length, Content-Encoding]
      LifecycleConfiguration:
        Rules:
          - Id: RetireArtifacts
            Status: Enabled
            ExpirationInDays: 730
            TagFilters:
              - Key: Type
                Value: Artifact
            Transitions:
              - TransitionInDays: 30
                StorageClass: STANDARD_IA
              - TransitionInDays: 183
                StorageClass: GLACIER
      VersioningConfiguration:
        Status: Enabled

  BucketUser:
    Type: AWS::IAM::User
    Properties:
      Policies:
        - PolicyName: ReadWriteAccessToBucket
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                  - s3:ListBucket
                Resource:
                  - !GetAtt BundleStatsBucket.Arn
              - Effect: Allow
                Action:
                  - s3:GetObject
                  - s3:PutObject
                  - s3:PutObjectAcl
                  - s3:PutObjectTagging
                Resource:
                  - !Sub 'arn:aws:s3:::${BundleStatsBucket}/*'

  AccessKey:
    Type: AWS::IAM::AccessKey
    Properties:
      Status: Active
      UserName: !Ref BucketUser

Outputs:
  BucketName:
    Description: 'Bucket name'
    Value: !Ref BundleStatsBucket

  AccessKey:
    Description: 'Access key for bucket reader/writer'
    Value: !Ref AccessKey

  SecretAccessKey:
    Description: 'Secret access key for bucket reader/writer'
    Value: !GetAtt AccessKey.SecretAccessKey