Merge pull request #5492 from aws-amplify/multi-bucket-infra-update

Multi bucket infra update

Author: ekjotmultani

infra-gen2/backends/storage/main/amplify/backend.ts

@@ -1,26 +1,52 @@
 import { defineBackend } from "@aws-amplify/backend";
 import * as s3 from "aws-cdk-lib/aws-s3";
 import { auth } from "./auth/resource";
-import { storage } from "./storage/resource";
+import { firstBucket, secondBucket } from "./storage/resource";
 
 /**
  * @see https://docs.amplify.aws/react/build-a-backend/ to add storage, functions, and more
  */
 const backend = defineBackend({
   auth,
-  storage,
+  firstBucket,
+  secondBucket,
 });
 
 // custom storage configurations
-const s3Bucket = backend.storage.resources.bucket;
+const s3Bucket = backend.firstBucket.resources.bucket;
 const cfnBucket = s3Bucket.node.defaultChild as s3.CfnBucket;
+const s3SecondaryBucket = backend.secondBucket.resources.bucket;
+const cfnSecondaryBucket = s3SecondaryBucket.node.defaultChild as s3.CfnBucket;
 
 cfnBucket.accelerateConfiguration = {
   accelerationStatus: "Enabled",
 };
 
+cfnSecondaryBucket.accelerateConfiguration = {
+  accelerationStatus: "Enabled",
+};
+
+// required to add the metadata header, which amplify-backend does not support
+backend.firstBucket.resources.cfnResources.cfnBucket.corsConfiguration = {
+  corsRules: [
+    {
+      allowedHeaders: ["*"],
+      allowedMethods: ["GET", "HEAD", "PUT", "POST", "DELETE"],
+      allowedOrigins: ["*"],
+      exposedHeaders: [
+        "x-amz-server-side-encryption",
+        "x-amz-request-id",
+        "x-amz-id-2",
+        "ETag",
+        "x-amz-meta-description",
+      ],
+      maxAge: 3000,
+    },
+  ],
+};
+
 // required to add the metadata header, which amplify-backend does not support
-backend.storage.resources.cfnResources.cfnBucket.corsConfiguration = {
+backend.secondBucket.resources.cfnResources.cfnBucket.corsConfiguration = {
   corsRules: [
     {
       allowedHeaders: ["*"],

infra-gen2/backends/storage/main/amplify/storage/resource.ts

@@ -1,7 +1,25 @@
 import { defineStorage } from "@aws-amplify/backend";
 
-export const storage = defineStorage({
-  name: "Storage Integ Test main",
+export const firstBucket = defineStorage({
+  name: "Storage Integ Test main bucket",
+  isDefault: true,
+  access: (allow) => ({
+    "public/*": [
+      allow.guest.to(["read", "write", "delete"]),
+      allow.authenticated.to(["read", "delete", "write"]),
+    ],
+    "protected/{entity_id}/*": [
+      allow.authenticated.to(["read"]),
+      allow.entity("identity").to(["read", "write", "delete"]),
+    ],
+    "private/{entity_id}/*": [
+      allow.entity("identity").to(["read", "write", "delete"]),
+    ],
+  }),
+});
+
+export const secondBucket = defineStorage({
+  name: "Storage Integ Test secondary bucket",
   access: (allow) => ({
     "public/*": [
       allow.guest.to(["read", "write", "delete"]),