amazon-s3 - S3 Creation CloudFormation 导致 400 错误请求

Question

我在使用 CloudFormation 创建 S3 存储桶时遇到此问题。我收到 400 Bad 请求。如果有人可以提供帮助，我将不胜感激。

aws cloudformation deploy --profile DEV --stack-name testBucket --template-file create_bucket.yml --region us-east-1 --capabilities CAPABILITY_IAM CAPABILITY_NAMED_IAM --parameter-overrides BucketName=myBucket

模板:

    AWSTemplateFormatVersion: 2010-09-09
    Parameters:
      BucketName:
        Description: Provisioned read throughput for each table
        Type: String
    Resources:
      MYBUCKET:
        Type: AWS::S3::Bucket
        Properties:
          BucketName: ${BucketName}
      MYBUCKETPOLICY:
        Type: AWS::S3::BucketPolicy
        Properties:
          Bucket: !Ref MYBUCKET
          PolicyDocument:
            Id: ReportPolicy
            Version: "2012-10-17"
            Statement:
              - Sid: ReportBucketPolicyDoc
                Effect: Allow
                Action: "s3:*"
                Principal:
                  AWS: !Join ['', ["arn:aws:iam::", !Ref "AWS::AccountId", ":root"]]
                Resource: !Join ['', ['arn:aws:s3:::', !Ref MYBUCKET, '/*']]

错误

Bad Request (Service: Amazon S3; Status Code: 400; Error Code: 400 Bad Request; Request ID: B4AEAA3C454B7868; S3 Extended Request ID: ATFscTA4dQw8J8AYUfkIARYhiT4/BpVWRcD172WnR75Uzm+i5dlHOTC2HCb9drkO16dzYiELJZc=)

Answer 1

以下主题与任何在删除另一个区域中的存储桶之后尝试更改 S3 存储桶区域的人相关。

本质上，在一个区域中删除存储桶与在所有其他区域中使用该名称之间存在延迟。因此，如果您删除了 ap-southeast-2 中的存储桶，然后尝试创建同名的存储桶 us-east-1，您应该会收到这种类型的存储桶错误。

https://github.com/aws/aws-cdk/issues/6646#issuecomment-597905903