S3 Buckets fail to create due to ACLs for access logs #17
Description
I successfully deployed one instance of this solution in March 2023.
However, when attempting to deploy the solution today there is an error on the InnovationRunMgmtStack resource.
The stack fails to create the S3 buckets "mgmtflowlogsbucket" and "mgmtbucket" with an error:
Bucket cannot have ACLs set with ObjectOwnership's BucketOwnerEnforced setting (Service: Amazon S3; Status Code: 400; Error Code: InvalidBucketAclWithObjectOwnership; Request ID: [removed]; S3 Extended Request ID: [removed]; Proxy: null)
I contacted AWS Support, who confirmed that this appears to be caused by changes made in April 2023:
https://aws.amazon.com/blogs/aws/heads-up-amazon-s3-security-changes-are-coming-in-april-of-2023/
This AWS re:Post suggests a solution for CloudFormation, but I'm not familiar enough with the CDK to attempt to implement the changes in this codebase.