aws / aws-cdk

Describe the bug

When making changes to the S3 event notifications in the stack that owns an S3 Bucket (on Bucket), it deletes event notifications for the bucket that have been configured in other stacks (on IBucket).

Expected Behavior

Event notifications configured in other stacks should not be deleted.

Current Behavior

Event notifications configured in other stacks are being deleted.

Reproduction Steps

Create and deploy Bucket in stack 1.

// stack 1
new Bucket(this, 'Bucket', {
    bucketName: 'bucketname',
});

Add and deploy event notification in stack 2

// stack 2
Bucket.fromBucketName(this, 'DataBucket', 'bucketName').addEventNotification(
    EventType.OBJECT_CREATED_PUT,
    new LambdaDestination(lambda)
);

Make a change to event notifications in stack 1 and deploy:

// stack 1
new Bucket(this, 'Bucket', {
    bucketName: 'bucketname',
+   eventBridgeEnabled: true,
});

The event handler configured and deployed in step 2 will be deleted when doing step 3.

Possible Solution

Use the same logic for handling BucketNotifications in the stack that owns the Bucket as in other stack:

aws-cdk/packages/@aws-cdk/custom-resource-handlers/lib/aws-s3/notifications-resource-handler/index.py

Line 37 in 7360a88

    
           def handle_unmanaged(bucket, stack_id, request_type, notification_configuration, old):

Additional Information/Context

This is happening for Bucket (unlike IBucket) cdk sets Managed property on the custom resource that manages event notifications to true.

aws-cdk/packages/aws-cdk-lib/aws-s3/lib/notifications-resource/notifications-resource.ts

Line 120 in 71986ff

const managed = this.bucket instanceof Bucket;

aws-cdk/packages/aws-cdk-lib/aws-s3/lib/notifications-resource/notifications-resource.ts

Line 135 in 71986ff

Managed: managed,

And the code in the custom resource lambda handler disregards externally set notifications if Managed is set to true.

aws-cdk/packages/@aws-cdk/custom-resource-handlers/lib/aws-s3/notifications-resource-handler/index.py

Line 21 in 7360a88

config = handle_managed(event["RequestType"], notification_configuration)

CDK CLI Version

2.146.0 (build b368c78)

Framework Version

2.146.0

Node.js Version

v20.11.0

OS

macOS 14.3.1 (23D60)

Language

TypeScript

Language Version

5.5.2

Other information

Activating eventbridge for our S3 Bucket in cdk caused our site to break because a notification set up in another stack using cdk got deleted.

Yes I can reproduce that by following your steps. I think we need to look into the implementation from the custom resource to get it fixed.