0
votes

I've got an S3 bucket with a bunch of files in it - I don't want to disturb those files if possible. However, I do need to update a policy on the S3 bucket. We're doing everything through Cloudformation, and I'm running into an issue where I cannot seem to update the bucket without deleting it first.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html I've read this page, but I don't think any of those options do what I need.

1
Just update the policy that is all I think. - Lamanus
If it's a Cloud formation stack, best practice is to update the stack via the template. What error message do you get when you update it? - Rodrigo M
Can you post the template? - Rodrigo M

1 Answers

1
votes

S3 Bucket Policies are a different resource in cloudformation from the actual bucket.

Changing the Policy Document attribute on the policy requires "no interruption" which is generally the type of update that you want.

Since you mentioned an error while trying to perform the update, my guess is something else is actually causing the error since the policy change alone wouldn't do it.

Can you please post the error message you're receiving?