Shared S3 helper utilities for MDAA constructs. Consolidates lifecycle, bucket policy, inventory, and audit helpers into a single jsii-compatible package.
Translates config-friendly S3 lifecycle rule definitions (string storage classes
and day counts) into CDK LifecycleRule objects. Provides a single canonical
config shape shared across MDAA L3 constructs.
Generates S3 bucket policy statements for prefix-level and bucket-level access control. Supports federated (role ID) and non-federated (principal ARN) access patterns with read, read-write, and read-write-super permission tiers.
Creates S3 inventory configurations and associated Glue tables for querying inventory data via Athena. Supports cross-account inventory destinations.
Creates CloudTrail trails for S3 data events and Glue tables for querying CloudTrail audit logs via Athena. Supports both all-bucket and selective event selector configurations.