feat(bootstrap): force toolkit bucket private (#3695)

aws · Aug 18, 2019 · d1ee4ba · d1ee4ba
1 parent 7ec8db2
commit d1ee4ba
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/packages/aws-cdk/lib/api/bootstrap-environment.ts b/packages/aws-cdk/lib/api/bootstrap-environment.ts
@@ -46,7 +46,13 @@ export async function bootstrapEnvironment(environment: cxapi.Environment, aws:
                 KMSMasterKeyID: props.kmsKeyId,
               },
             }]
-          }
+          },
+          PublicAccessBlockConfiguration: {
+            BlockPublicAcls: true,
+            BlockPublicPolicy: true,
+            IgnorePublicAcls: true,
+            RestrictPublicBuckets: true,
+          },
         }
       }
     },