feat(codepipeline): Cross region S3 buckets block public access by de…

…fault. The cross region S3 buckets that are created should have block public access by default. fixes aws#16411
david-richer-adsk · Nov 25, 2021 · 54df648 · 54df648
1 parent 53620e9
commit 54df648
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/packages/@aws-cdk/aws-codepipeline/lib/private/cross-region-support-stack.ts b/packages/@aws-cdk/aws-codepipeline/lib/private/cross-region-support-stack.ts
@@ -77,6 +77,7 @@ export class CrossRegionSupportConstruct extends Construct {
       bucketName: cdk.PhysicalName.GENERATE_IF_NEEDED,
       encryption: encryptionAlias ? s3.BucketEncryption.KMS : s3.BucketEncryption.KMS_MANAGED,
       encryptionKey: encryptionAlias,
+      blockPublicAccess: new s3.BlockPublicAccess(s3.BlockPublicAccess.BLOCK_ALL)
     });
   }
 }