JavaScript (v3): Photo Analyzer - Block non-SSL requests to bucket.

Author: cpyle0819

javascriptv3/example_code/cross-services/photo_analyzer/stack.yaml

@@ -26,6 +26,23 @@ Resources:
         Ref: bucketforimages293BECA3
       PolicyDocument:
         Statement:
+          - Action: s3:*
+            Condition:
+              Bool:
+                aws:SecureTransport: "false"
+            Effect: Deny
+            Principal:
+              AWS: "*"
+            Resource:
+              - Fn::GetAtt:
+                  - bucketforimages293BECA3
+                  - Arn
+              - Fn::Join:
+                  - ""
+                  - - Fn::GetAtt:
+                        - bucketforimages293BECA3
+                        - Arn
+                    - /*
           - Action:
               - s3:GetObject*
               - s3:GetBucket*