import * as pulumi from "@pulumi/pulumi"; /** * Manages S3 account-level Public Access Block configuration. For more information about these settings, see the [AWS S3 Block Public Access documentation](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html). * * > **NOTE:** Each AWS account may only have one S3 Public Access Block configuration. Multiple configurations of the resource against the same AWS account will cause a perpetual difference. * * > Advanced usage: To use a custom API endpoint for this resource, use the `s3control` endpoint provider configuration, not the `s3` endpoint provider configuration. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws from "@pulumi/aws"; * * const example = new aws.s3.AccountPublicAccessBlock("example", { * blockPublicAcls: true, * blockPublicPolicy: true, * }); * ``` * * ## Import * * ### Identity Schema * * #### Required * * * `accountId` (String) AWS account ID. * * Using `pulumi import`, import `aws.s3.AccountPublicAccessBlock` using the AWS account ID. For example: * * ```sh * $ pulumi import aws:s3/accountPublicAccessBlock:AccountPublicAccessBlock example 123456789012 * ``` */ export declare class AccountPublicAccessBlock extends pulumi.CustomResource { /** * Get an existing AccountPublicAccessBlock resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: AccountPublicAccessBlockState, opts?: pulumi.CustomResourceOptions): AccountPublicAccessBlock; /** * Returns true if the given object is an instance of AccountPublicAccessBlock. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is AccountPublicAccessBlock; /** * AWS account ID to configure. Defaults to automatically determined account ID of the this provider AWS provider. */ readonly accountId: pulumi.Output; /** * Whether Amazon S3 should block public ACLs for buckets in this account. Defaults to `false`. Enabling this setting does not affect existing policies or ACLs. When set to `true`, PUT Bucket acl and PUT Object acl calls fail if the specified ACL allows public access, and PUT Object calls fail if the request includes a public ACL. */ readonly blockPublicAcls: pulumi.Output; /** * Whether Amazon S3 should block public bucket policies for buckets in this account. Defaults to `false`. Enabling this setting does not affect existing bucket policies. When set to `true`, Amazon S3 rejects calls to PUT Bucket policy if the specified bucket policy allows public access. */ readonly blockPublicPolicy: pulumi.Output; /** * Whether Amazon S3 should ignore public ACLs for buckets in this account. Defaults to `false`. Enabling this setting does not affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set. When set to `true`, Amazon S3 ignores all public ACLs on buckets in this account and any objects that they contain. */ readonly ignorePublicAcls: pulumi.Output; /** * Whether Amazon S3 should restrict public bucket policies for buckets in this account. Defaults to `false`. Enabling this setting does not affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked. When set to `true`, only the bucket owner and AWS Services can access buckets with public policies. */ readonly restrictPublicBuckets: pulumi.Output; /** * Create a AccountPublicAccessBlock resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args?: AccountPublicAccessBlockArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering AccountPublicAccessBlock resources. */ export interface AccountPublicAccessBlockState { /** * AWS account ID to configure. Defaults to automatically determined account ID of the this provider AWS provider. */ accountId?: pulumi.Input; /** * Whether Amazon S3 should block public ACLs for buckets in this account. Defaults to `false`. Enabling this setting does not affect existing policies or ACLs. When set to `true`, PUT Bucket acl and PUT Object acl calls fail if the specified ACL allows public access, and PUT Object calls fail if the request includes a public ACL. */ blockPublicAcls?: pulumi.Input; /** * Whether Amazon S3 should block public bucket policies for buckets in this account. Defaults to `false`. Enabling this setting does not affect existing bucket policies. When set to `true`, Amazon S3 rejects calls to PUT Bucket policy if the specified bucket policy allows public access. */ blockPublicPolicy?: pulumi.Input; /** * Whether Amazon S3 should ignore public ACLs for buckets in this account. Defaults to `false`. Enabling this setting does not affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set. When set to `true`, Amazon S3 ignores all public ACLs on buckets in this account and any objects that they contain. */ ignorePublicAcls?: pulumi.Input; /** * Whether Amazon S3 should restrict public bucket policies for buckets in this account. Defaults to `false`. Enabling this setting does not affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked. When set to `true`, only the bucket owner and AWS Services can access buckets with public policies. */ restrictPublicBuckets?: pulumi.Input; } /** * The set of arguments for constructing a AccountPublicAccessBlock resource. */ export interface AccountPublicAccessBlockArgs { /** * AWS account ID to configure. Defaults to automatically determined account ID of the this provider AWS provider. */ accountId?: pulumi.Input; /** * Whether Amazon S3 should block public ACLs for buckets in this account. Defaults to `false`. Enabling this setting does not affect existing policies or ACLs. When set to `true`, PUT Bucket acl and PUT Object acl calls fail if the specified ACL allows public access, and PUT Object calls fail if the request includes a public ACL. */ blockPublicAcls?: pulumi.Input; /** * Whether Amazon S3 should block public bucket policies for buckets in this account. Defaults to `false`. Enabling this setting does not affect existing bucket policies. When set to `true`, Amazon S3 rejects calls to PUT Bucket policy if the specified bucket policy allows public access. */ blockPublicPolicy?: pulumi.Input; /** * Whether Amazon S3 should ignore public ACLs for buckets in this account. Defaults to `false`. Enabling this setting does not affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set. When set to `true`, Amazon S3 ignores all public ACLs on buckets in this account and any objects that they contain. */ ignorePublicAcls?: pulumi.Input; /** * Whether Amazon S3 should restrict public bucket policies for buckets in this account. Defaults to `false`. Enabling this setting does not affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked. When set to `true`, only the bucket owner and AWS Services can access buckets with public policies. */ restrictPublicBuckets?: pulumi.Input; } //# sourceMappingURL=accountPublicAccessBlock.d.ts.map