s3-expiry.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: >
  CloudFormation template used for provisioning SAM artifact storage for environments 
  that require rapid expiration of build artifacts.
Parameters:
  AppName:
    Type: String
    Description: "Name of application."
    AllowedPattern: ".+"
    Default: "ninja-buckets"

  Environment:
    Type: String
    Description: "Environment code of deployment (dev, uat, prod)"
    AllowedPattern: ".+"
    AllowedValues:
      - "dev"
      - "uat"
      - "prod"

Resources:
  SamArtifactStorage:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Join ["-", [!Ref AppName, !Ref Environment, "sam-artifacts"]]
      LifecycleConfiguration:
        Rules:
          - Id: DeleteDevArtifactsAfterOneDay
            Status: "Enabled"
            ExpirationInDays: 1
      BucketEncryption:
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: AES256
      Tags:
        - Key: "ENVIRONMENT"
          Value: !Ref Environment
        - Key: "APP"
          Value: !Ref AppName