S3 creation error: CannotCreateExternalResource managed/bucket.s3.aws.crossplane.io failed to create the Bucket: InvalidBucketAclWithObjectOwnership: Bucket cannot have ACLs set with ObjectOwnership's BucketOwnerEnforced setting

[jonashackt]

There seem to be new security rules for AWS S3 from April 2023 on https://aws.amazon.com/about-aws/whats-new/2022/12/amazon-s3-automatically-enable-block-public-access-disable-access-control-lists-buckets-april-2023/

Running a k describe bucket.s3.aws.crossplane.io/microservice-ui-nuxt-js-static-bucket2 gives the following error event:

$ k describe bucket.s3.aws.crossplane.io/microservice-ui-nuxt-js-static-bucket2
...
Events:
  Type     Reason                        Age                From                                 Message
  ----     ------                        ----               ----                                 -------
  Warning  CannotCreateExternalResource  47s (x9 over 85s)  managed/bucket.s3.aws.crossplane.io  failed to create the Bucket: api error InvalidBucketAclWithObjectOwnership: Bucket cannot have ACLs set with ObjectOwnership's BucketOwnerEnforced setting

Thats also a problem in Terraform, see hashicorp/terraform-provider-aws#28353

And this so Q&A: https://stackoverflow.com/questions/76097031/aws-s3-bucket-cannot-have-acls-set-with-objectownerships-bucketownerenforced-s

This now leads to failing pipelines all over - see #11 etc.

[jonashackt]

Also see crossplane-contrib/provider-aws@95d2125