Common-Buckets.yaml

AWSTemplateFormatVersion: 2010-09-09
Description: Common-Buckets Template.
  This creates S3 Buckets which should exist in every Region. These buckets hold artifacts needed to build Stacks, which are not created as part of a Build Process.
Metadata:
  AWS::CloudFormation::Interface:
    ParameterGroups:
      - Label:
          default: Environment Configuration
        Parameters:
          - AccountAlias
          - EnvironmentName
      - Label:
          default: Bucket Configuration
        Parameters:
          - UseGlacier
    ParameterLabels:
      AccountAlias:
        default: Account Alias
      EnvironmentName:
        default: Environment Name
      UseGlacier:
        default: Use Glacier
Parameters:
  AccountAlias:
    Description: Unique Alias of the Account (if defined). If specified, the Alias instead of the AccountID is appended to bucket names to insure uniqueness.
    Type: String
    MaxLength: 32
    Default: ''
    AllowedPattern: (^$|^[a-z][-a-z0-9]*$)
    ConstraintDescription: must begin with a lower case letter and contain lower case letters, numbers and dashes.
  EnvironmentName:
    Description: Name of the Environment associated with the Stack
    Type: String
    Default: Production
    AllowedValues:
      - Production
      - Staging
      - UAT
      - QA
      - Testing
      - Development
      - Build
      - Core
      - Recovery
      - Log
      - Identity
      - Management
      - Organization
    ConstraintDescription: must be Production, Staging, UAT, QA, Testing, Development, Build, Core, Recovery, Log, Identity, Management or Organization.
  UseGlacier:
    Description: Use Glacier for Archived Logs
    Type: String
    Default: true
    AllowedValues:
      - true
      - false
    ConstraintDescription: must be either true or false.
Conditions:
  AppendAccountId: !Equals [ !Ref AccountAlias, '' ]
  ConfigureGlacier: !Equals [ !Ref UseGlacier, true ]
Resources:
  TemplatesBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub
        - templates-${Account}-${AWS::Region}
        - Account: !If [ AppendAccountId, !Ref 'AWS::AccountId', !Ref AccountAlias ]
      AccessControl: Private
      VersioningConfiguration:
        Status: Enabled
      LifecycleConfiguration:
        Rules:
          - Id: ReduceStorageCostsThenDeletePriorVersions
            Status: Enabled
            Prefix: ''
            Transitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            ExpirationInDays: 425
            NoncurrentVersionTransitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            NoncurrentVersionExpirationInDays: 395
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName}-TemplatesBucket
    DeletionPolicy: Retain
  TemplatesBucketPolicy:
    Type: AWS::S3::BucketPolicy
    Properties:
      Bucket: !Ref TemplatesBucket
      PolicyDocument:
        Version: 2012-10-17
        Statement:
          - Sid: AllowCloudFormationACLCheck
            Effect: Allow
            Principal:
              Service: cloudformation.amazonaws.com
            Action: s3:GetBucketAcl
            Resource: !Sub arn:aws:s3:::${TemplatesBucket}
          - Sid: AllowCloudFormationRead
            Effect: Allow
            Principal:
              Service: cloudformation.amazonaws.com
            Action: s3:GetObject
            Resource: !Sub arn:aws:s3:::${TemplatesBucket}/*
    DependsOn: TemplatesBucket
  FunctionsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub
        - functions-${Account}-${AWS::Region}
        - Account: !If [ AppendAccountId, !Ref 'AWS::AccountId', !Ref AccountAlias ]
      AccessControl: Private
      VersioningConfiguration:
        Status: Enabled
      LifecycleConfiguration:
        Rules:
          - Id: ReduceStorageCostsThenDeletePriorVersions
            Status: Enabled
            Prefix: ''
            Transitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            ExpirationInDays: 425
            NoncurrentVersionTransitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            NoncurrentVersionExpirationInDays: 395
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName}-FunctionsBucket
    DeletionPolicy: Retain
  ScriptsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub
        - scripts-${Account}-${AWS::Region}
        - Account: !If [ AppendAccountId, !Ref 'AWS::AccountId', !Ref AccountAlias ]
      AccessControl: Private
      VersioningConfiguration:
        Status: Enabled
      LifecycleConfiguration:
        Rules:
          - Id: ReduceStorageCostsThenDeletePriorVersions
            Status: Enabled
            Prefix: ''
            Transitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            ExpirationInDays: 425
            NoncurrentVersionTransitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            NoncurrentVersionExpirationInDays: 395
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName}-ScriptsBucket
    DeletionPolicy: Retain
  ConfigurationsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub
        - configurations-${Account}-${AWS::Region}
        - Account: !If [ AppendAccountId, !Ref 'AWS::AccountId', !Ref AccountAlias ]
      AccessControl: Private
      VersioningConfiguration:
        Status: Enabled
      LifecycleConfiguration:
        Rules:
          - Id: ReduceStorageCostsThenDeletePriorVersions
            Status: Enabled
            Prefix: ''
            Transitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            ExpirationInDays: 425
            NoncurrentVersionTransitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            NoncurrentVersionExpirationInDays: 395
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName}-ConfigurationsBucket
    DeletionPolicy: Retain
  ProductsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub
        - products-${Account}-${AWS::Region}
        - Account: !If [ AppendAccountId, !Ref 'AWS::AccountId', !Ref AccountAlias ]
      AccessControl: Private
      VersioningConfiguration:
        Status: Enabled
      LifecycleConfiguration:
        Rules:
          - Id: ReduceStorageCostsThenDeletePriorVersions
            Status: Enabled
            Prefix: ''
            Transitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            ExpirationInDays: 425
            NoncurrentVersionTransitions:
              - StorageClass: STANDARD_IA
                TransitionInDays: 30
            NoncurrentVersionExpirationInDays: 395
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName}-ProductsBucket
    DeletionPolicy: Retain
  BackupsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub
        - backups-${Account}-${AWS::Region}
        - Account: !If [ AppendAccountId, !Ref 'AWS::AccountId', !Ref AccountAlias ]
      AccessControl: Private
      VersioningConfiguration:
        Status: Enabled
      LifecycleConfiguration:
        Rules:
          - Id: ReduceStorageCostsThenDeletePriorVersions
            Status: Enabled
            Prefix: ''
            Transitions:
              - StorageClass: !If [ ConfigureGlacier, GLACIER, STANDARD_IA ]
                TransitionInDays: 90
            ExpirationInDays: 365
            NoncurrentVersionTransitions:
              - StorageClass: !If [ ConfigureGlacier, GLACIER, STANDARD_IA ]
                TransitionInDays: 30
            NoncurrentVersionExpirationInDays: 180
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName}-BackupsBucket
    DeletionPolicy: Retain
Outputs:
  TemplatesBucket:
    Description: The Templates Bucket Name
    Value: !Ref TemplatesBucket
    Export:
      Name: !Sub ${AWS::StackName}-TemplatesBucket
  FunctionsBucket:
    Description: The Functions Bucket Name
    Value: !Ref FunctionsBucket
    Export:
      Name: !Sub ${AWS::StackName}-FunctionsBucket
  ScriptsBucket:
    Description: The Scripts Bucket Name
    Value: !Ref ScriptsBucket
    Export:
      Name: !Sub ${AWS::StackName}-ScriptsBucket
  ConfigurationsBucket:
    Description: The Configurations Bucket Name
    Value: !Ref ConfigurationsBucket
    Export:
      Name: !Sub ${AWS::StackName}-ConfigurationsBucket
  ProductsBucket:
    Description: The Products Bucket Name
    Value: !Ref ProductsBucket
    Export:
      Name: !Sub ${AWS::StackName}-ProductsBucket
  BackupsBucket:
    Description: The Backups Bucket Name
    Value: !Ref BackupsBucket
    Export:
      Name: !Sub ${AWS::StackName}-BackupsBucket