On this page
aws_s3_cors - Manage CORS for S3 buckets in AWS
New in version 2.5.
Synopsis
- Manage CORS for S3 buckets in AWS
 
Requirements
The below requirements are needed on the host that executes this module.
- python >= 2.6
 - boto
 
Parameters
| Parameter | Choices/Defaults | Comments | 
|---|---|---|
| aws_access_key | 
        
        AWS access key. If not set then the value of the AWS_ACCESS_KEY_ID, AWS_ACCESS_KEY or EC2_ACCESS_KEY environment variable is used.
        
       aliases: ec2_access_key, access_key  | 
     |
| aws_secret_key | 
        
        AWS secret key. If not set then the value of the AWS_SECRET_ACCESS_KEY, AWS_SECRET_KEY, or EC2_SECRET_KEY environment variable is used.
        
       aliases: ec2_secret_key, secret_key  | 
     |
| ec2_url | 
        
        Url to use to connect to EC2 or your Eucalyptus cloud (by default the module will use EC2 endpoints). Ignored for modules where region is required. Must be specified for all other modules if region is not used. If not set then the value of the EC2_URL environment variable, if any, is used.
         | 
     |
| name  
        required
         | 
      
        
        Name of the s3 bucket
         | 
     |
| profile  
        (added in 1.6)
         | 
      
        
        Uses a boto profile. Only works with boto >= 2.24.0.
         | 
     |
| region | 
        
        The AWS region to use. If not specified then the value of the AWS_REGION or EC2_REGION environment variable, if any, is used. See http://docs.aws.amazon.com/general/latest/gr/rande.html#ec2_region
        
       aliases: aws_region, ec2_region  | 
     |
| rules | 
        
        Cors rules to put on the s3 bucket
         | 
     |
| security_token  
        (added in 1.6)
         | 
      
        
        AWS STS security token. If not set then the value of the AWS_SECURITY_TOKEN or EC2_SECURITY_TOKEN environment variable is used.
        
       aliases: access_token  | 
     |
| state  
        required
         | 
      
       
  | 
      
        
        Create or remove cors on the s3 bucket
         | 
     
| validate_certs  
        bool
         
        (added in 1.5)
         | 
      
       
  | 
      
        
        When set to "no", SSL certificates will not be validated for boto versions >= 2.6.0.
         | 
     
Notes
Note
- If parameters are not set within the module, the following environment variables can be used in decreasing order of precedence 
AWS_URLorEC2_URL,AWS_ACCESS_KEY_IDorAWS_ACCESS_KEYorEC2_ACCESS_KEY,AWS_SECRET_ACCESS_KEYorAWS_SECRET_KEYorEC2_SECRET_KEY,AWS_SECURITY_TOKENorEC2_SECURITY_TOKEN,AWS_REGIONorEC2_REGION - Ansible uses the boto configuration file (typically ~/.boto) if no credentials are provided. See http://boto.readthedocs.org/en/latest/boto_config_tut.html
 AWS_REGIONorEC2_REGIONcan be typically be used to specify the AWS region, when required, but this can also be configured in the boto config file
Examples
# Note: These examples do not set authentication details, see the AWS Guide for details.
# Create a simple cors for s3 bucket
- aws_s3_cors:
    name: mys3bucket
    state: present
    rules:
      - allowed_origins:
          - http://www.example.com/
        allowed_methods:
          - GET
          - POST
        allowed_headers:
          - Authorization
        expose_headers:
          - x-amz-server-side-encryption
          - x-amz-request-id
        max_age_seconds: 30000
# Remove cors for s3 bucket
- aws_s3_cors:
    name: mys3bucket
    state: absent
  Return Values
Common return values are documented here, the following are the fields unique to this module:
| Key | Returned | Description | 
|---|---|---|
| changed  
        boolean
         | 
      always | 
        
        check to see if a change was made to the rules
         Sample:
        
       
        True
         | 
     
| name  
        string
         | 
      always | 
        
        name of bucket
         Sample:
        
       
        bucket-name
         | 
     
| rules  
        list
         | 
      always | 
        
        list of current rules
         Sample:
        
       
        [{'allowed_headers': ['Authorization'], 'allowed_methods': ['GET'], 'allowed_origins': ['*'], 'max_age_seconds': 30000}]
         | 
     
Status
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
Maintenance
This module is flagged as community which means that it is maintained by the Ansible Community. See Module Maintenance & Support for more info.
For a list of other modules that are also maintained by the Ansible Community, see here.
Author
- Oyvind Saltvik (@fivethreeo)
 
Hint
If you notice any issues in this documentation you can edit this document to improve it.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
 https://docs.ansible.com/ansible/2.6/modules/aws_s3_cors_module.html