S3 Object Lambda

2 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

S3ObjectLambdaAccessPoint # CLOUD CONTROL · AWS::S3ObjectLambda::AccessPoint

S3ObjectLambdaAccessPoint manages AWS::S3ObjectLambda::AccessPoint through the AWS Cloud Control API.

kubectl get s3objectlambdaaccesspoints · example on GitHub

Example

# S3ObjectLambdaAccessPoint — S3 Object Lambda
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3objectlambda.html#s3objectlambdaaccesspoint
apiVersion: aws.konfig.io/v1alpha1
kind: S3ObjectLambdaAccessPoint
metadata:
  name: example-s3objectlambdaaccesspoint
  namespace: default
spec:
  name: example-s3objectlambdaaccesspoint
  objectLambdaConfiguration:
    allowedFeatures:
    - example
    cloudWatchMetricsEnabled: true
    supportingAccessPoint: example
    transformationConfigurations:
    - actions:
      - example
  providerRef:
    name: example-s3objectlambdaaccesspoint
    region: us-east-1

Spec

Field	Type	Required	Description
`name`	string	—	The name you want to assign to this Object lambda Access Point.
`objectLambdaConfiguration`	object	yes	The Object lambda Access Point Configuration that configures transformations to be applied on the objects on specified S3 Actions
`objectLambdaConfiguration.allowedFeatures`	array<string>	—
`objectLambdaConfiguration.cloudWatchMetricsEnabled`	boolean	—
`objectLambdaConfiguration.supportingAccessPoint`	string	yes
`objectLambdaConfiguration.transformationConfigurations`	array<object>	yes
`objectLambdaConfiguration.transformationConfigurations[].actions`	array<string>	yes
`objectLambdaConfiguration.transformationConfigurations[].contentTransformation`	object	yes
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`alias`	object	—	Read-only: reported by AWS after creation.
`alias.status`	string	—	The status of the Object Lambda alias.
`alias.value`	string	yes	The value of the Object Lambda alias.
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`creationDate`	string	—	The date and time when the Object lambda Access Point was created.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`policyStatus`	object	—	Read-only: reported by AWS after creation.
`policyStatus.isPublic`	boolean	—	Specifies whether the Object lambda Access Point Policy is Public or not.
`publicAccessBlockConfiguration`	object	—	The PublicAccessBlock configuration that you want to apply to this Access Point.
`publicAccessBlockConfiguration.blockPublicAcls`	boolean	—	Specifies whether Amazon S3 should block public access control lists (ACLs) to this object lambda access point.
`publicAccessBlockConfiguration.blockPublicPolicy`	boolean	—	Specifies whether Amazon S3 should block public bucket policies for buckets in this account.
`publicAccessBlockConfiguration.ignorePublicAcls`	boolean	—	Specifies whether Amazon S3 should ignore public ACLs for buckets in this account.
`publicAccessBlockConfiguration.restrictPublicBuckets`	boolean	—	Specifies whether Amazon S3 should restrict public bucket policies for this bucket.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

S3ObjectLambdaAccessPointPolicy # CLOUD CONTROL · AWS::S3ObjectLambda::AccessPointPolicy

S3ObjectLambdaAccessPointPolicy manages AWS::S3ObjectLambda::AccessPointPolicy through the AWS Cloud Control API.

kubectl get s3objectlambdaaccesspointpolicies · example on GitHub

Example

# S3ObjectLambdaAccessPointPolicy — S3 Object Lambda
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/s3objectlambda.html#s3objectlambdaaccesspointpolicy
apiVersion: aws.konfig.io/v1alpha1
kind: S3ObjectLambdaAccessPointPolicy
metadata:
  name: example-s3objectlambdaaccesspointpolicy
  namespace: default
spec:
  objectLambdaAccessPoint: example
  providerRef:
    name: example-s3objectlambdaaccesspointpolicy
    region: us-east-1

Spec

Field	Type	Required	Description
`objectLambdaAccessPoint`	string	yes	The name of the Amazon S3 ObjectLambdaAccessPoint to which the policy applies.
`policyDocument`	object	yes	A policy document containing permissions to add to the specified ObjectLambdaAccessPoint.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.