Remove unused accessLogBucket

Author: kris-szlapa

packages/cdk/bin/EpsAssistMeApp.ts

@@ -41,18 +41,6 @@ const EpsAssistMe = new EpsAssistMeStack(app, "EpsAssistMeStack", {
 // Run a synth to add cross region lambdas and roles
 app.synth()
 
-// S3 Bucket: StorageAccessLogsBucketAccessLogs86FA3BBC
-// CDK-Path: EpsAssistMeStack/Storage/AccessLogsBucket/AccessLogs/Resource
-addCfnGuardMetadata(EpsAssistMe, "Storage/AccessLogsBucket", "AccessLogs",
-  ["S3_BUCKET_REPLICATION_ENABLED", "S3_BUCKET_VERSIONING_ENABLED", "S3_BUCKET_LOGGING_ENABLED"]
-)
-
-// S3 Bucket Policy: StorageAccessLogsBucketAccessLogsPolicy523966CD
-// CDK-Path: EpsAssistMeStack/Storage/AccessLogsBucket/AccessLogs/Policy/Resource
-addCfnGuardMetadata(EpsAssistMe, "Storage/AccessLogsBucket/AccessLogs", "Policy",
-  ["S3_BUCKET_SSL_REQUESTS_ONLY"]
-)
-
 // S3 Bucket: StorageDocsBucketDocs0C9A9D9E
 // CDK-Path: EpsAssistMeStack/Storage/DocsBucket/Docs/Resource
 addCfnGuardMetadata(EpsAssistMe, "Storage/DocsBucket", "Docs",
@@ -65,18 +53,6 @@ addCfnGuardMetadata(EpsAssistMe, "Storage/DocsBucket/Docs", "Policy",
   ["S3_BUCKET_SSL_REQUESTS_ONLY"]
 )
 
-// S3 Bucket: StorageLoggingBucketLogging36F28A73
-// CDK-Path: EpsAssistMeStack/Storage/LoggingBucket/Logging/Resource
-addCfnGuardMetadata(EpsAssistMe, "Storage/LoggingBucket", "Logging",
-  ["S3_BUCKET_REPLICATION_ENABLED", "S3_BUCKET_LOGGING_ENABLED"]
-)
-
-// S3 Bucket Policy: StorageLoggingBucketLoggingPolicy06AD29F1
-// CDK-Path: EpsAssistMeStack/Storage/LoggingBucket/Logging/Policy/Resource
-addCfnGuardMetadata(EpsAssistMe, "Storage/LoggingBucket/Logging", "Policy",
-  ["S3_BUCKET_SSL_REQUESTS_ONLY"]
-)
-
 // Lambda Function: CustomS3AutoDeleteObjectsCustomResourceProviderHandler9D90184F
 // CDK-Path: EpsAssistMeStack/Custom::S3AutoDeleteObjectsCustomResourceProvider/Handler
 addCfnGuardMetadata(EpsAssistMe, "Custom::S3AutoDeleteObjectsCustomResourceProvider", "Handler",

packages/cdk/constructs/S3Bucket.ts

@@ -10,9 +10,8 @@ import {Key} from "aws-cdk-lib/aws-kms"
 
 export interface S3BucketProps {
   bucketName: string
-  kmsKey?: Key
-  accessLogsBucket?: Bucket
-  versioned?: boolean
+  kmsKey: Key
+  versioned: boolean
 }
 
 export class S3Bucket extends Construct {
@@ -30,9 +29,7 @@ export class S3Bucket extends Construct {
       autoDeleteObjects: true,
       enforceSSL: true,
       versioned: props.versioned ?? false,
-      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,
-      serverAccessLogsBucket: props.accessLogsBucket,
-      serverAccessLogsPrefix: props.accessLogsBucket ? "s3-access-logs/" : undefined
+      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED
     })
 
     this.kmsKey = props.kmsKey

packages/cdk/resources/Storage.ts

@@ -4,29 +4,21 @@ import {S3Bucket} from "../constructs/S3Bucket"
 
 export class Storage extends Construct {
   public readonly kbDocsBucket: S3Bucket
-  public readonly accessLogBucket: S3Bucket
   public readonly kbDocsKey: Key
 
   constructor(scope: Construct, id: string) {
     super(scope, id)
 
-    // Create S3 bucket for storing API Gateway and S3 access logs
-    this.accessLogBucket = new S3Bucket(this, "AccessLogsBucket", {
-      bucketName: "AccessLogs",
-      versioned: false
-    })
-
     // Create customer-managed KMS key for knowledge base document encryption
     this.kbDocsKey = new Key(this, "KbDocsKey", {
       enableKeyRotation: true,
       description: "KMS key for encrypting knowledge base documents"
     })
 
-    // Create S3 bucket for knowledge base documents with encryption and access logging
+    // Create S3 bucket for knowledge base documents with encryption
     this.kbDocsBucket = new S3Bucket(this, "DocsBucket", {
       bucketName: "Docs",
       kmsKey: this.kbDocsKey,
-      accessLogsBucket: this.accessLogBucket.bucket,
       versioned: true
     })
   }