serverless-default-aws-resource-properties

serverless-default-aws-resource-properties

This plugin allows you to set default properties a given CloudFormation resource should have based on type.

Usage

Install the plugin:

npm install -D serverless-default-aws-resource-properties

Register the plugin in serverless.yml:

plugins:
  - serverless-default-aws-resource-properties

Example:

custom:
  defaultAwsProperties:
    # Enable SSE and block public access for all S3 buckets
    - Type: AWS::S3::Bucket
      Properties:
        BucketEncryption:
          ServerSideEncryptionConfiguration:
            - ServerSideEncryptionByDefault:
                SSEAlgorithm: AES256
        PublicAccessBlockConfiguration:
          BlockPublicAcls: true
          BlockPublicPolicy: true
          IgnorePublicAcls: true
          RestrictPublicBuckets: true
    # Add logging configuration to all S3 buckets except resource with
    # logical ID 'LoggingBucket'
    - Type: AWS::S3::Bucket
      Exclude:
        - LoggingBucket
      Properties:
        LoggingConfiguration:
          DestinationBucketName:
            Ref: LoggingBucket