Amazon S3 Two-way Replication via Replica Modification Sync

[ewbankkit]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Amazon S3 Replication now gives you the flexibility of replicating object metadata changes for two-way replication between buckets.
Amazon S3 replica modification sync can help you keep object metadata such as tags, ACLs, and Object Lock settings replicated between replicas and source objects.

New or Affected Resource(s)

• aws_s3_bucket

Potential Terraform Configuration

resource "aws_s3_bucket" "source" {
  bucket = "example"

  versioning {
    enabled = true
  }

  replication_configuration {
    role = aws_iam_role.replication.arn

    rules {
      id     = "foobar"
      prefix = "foo"
      status = "Enabled"

      source_selection_criteria {
        replica_modifications {
          Status = "Enabled"
        }
      }

      destination {
        bucket        = aws_s3_bucket.destination.arn
        storage_class = "STANDARD"
      }
    }
  }
}

References

Announcement.
Developer Guide.

[Kanikamiglani31]

Hello team, Do we have this feature working in terraform? I am looking for both "Delete marker replication" & "Replica modification sync" in terraform.

[Kanikamiglani31]

Hey all,

Meanwhile this can be achieved from local-exec and template_file with aws-cli.

The solution is present in the answer below:

https://stackoverflow.com/questions/67729643/how-can-we-enable-amazon-s3-replication-modification-sync-in-terraform/67792274#67792274

[tmccombs]

Meanwhile this can be achieved from local-exec and template_file with aws-cli.

As I've mentioned on other issues, that workaround doesn't work very well if you use a provider that assumes an IAM role.

[anGie44]

Noting here that while not available in the S3 bucket resource, replication_modifications is available in the standalone resource aws_s3_bucket_replication_configuration , available since v3.66.0 of the Terraform AWS Provider. Latest argument reference available here: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_replication_configuration#source_selection_criteria

[github-actions]

Marking this issue as stale due to inactivity. This helps our maintainers find and focus on the active issues. If this issue receives no comments in the next 30 days it will automatically be closed. Maintainers can also remove the stale label.

If this issue was automatically closed and you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thank you!

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.