S3 bucket grantee

[hashibot]

This issue was originally opened by @pporada-gl as hashicorp/terraform#8583. It was migrated here as part of the provider split. The original body of the issue is below.

---

Terraform Version

Terraform v0.7.2

Affected Resource(s)

Please list the resources as a list, for example:

• aws_s3_bucket

Expected Behavior

I should be able to set a grantee on a bucket. Currently I have to use a null_resource and a local_exec to run

    $ aws s3api put-bucket-acl --bucket mybucket --grant-write id=XXXXXXXXXXXXXXXXX

Actual Behavior

I can't set a grantee on a bucket via specifically the aws_s3_bucket resource though it is supported in the Go SDK.

Important Factoids

The AWS Go SDK supports grants on S3 buckets.
https://github.com/aws/aws-sdk-go/blob/master/models/apis/s3/2006-03-01/api-2.json#L2331

[rokka-n]

It would be nice to have this supported.

[jingyimei]

+1

[kmacoskey]

+1

[divyabhargov]

+1

[CpuID]

+1

[segersniels]

+1

[leighmhart]

+1

[jonathanhle]

+1

[ewbankkit]

Similar:

• Support multiple canned ACLs for AWS S3 buckets #144

[FearlessHyena]

Would be great if this was supported

[ewbankkit]

@pporada-gl @FearlessHyena Does the new aws_s3_bucket.grant argument added via #989, #3728 and available in version 2.52.0 of the Terraform AWS provider address your use case?

[FearlessHyena]

@ewbankkit Thanks for the reference. I didn't realise they added to the AWS provider recently. Let me try it out and see if it addresses my use case

[github-actions]

Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 30 days it will automatically be closed. Maintainers can also remove the stale label.

If this issue was automatically closed and you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thank you!

[anGie44]

Hi all, closing this is it's also available via the new aws_s3_bucket_acl.access_control_policy parameter available since v3.75.0 of the Terraform AWS Provider.

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.