Amazon web services S3 bucket:遇到不支持的属性AccessControl

Amazon web services S3 bucket:遇到不支持的属性AccessControl,amazon-web-services,amazon-s3,yaml,amazon-cloudformation,Amazon Web Services,Amazon S3,Yaml,Amazon Cloudformation,我正在尝试使用访问日志创建S3存储桶,这就是我在yaml中的云形成模板的样子 AccesslogBucket: DeletionPolicy: Retain Properties: BucketEncryption: AccessControl: LogDeliveryWrite ServerSideEncryptionConfiguration: - ServerSideEncryptionByDefault:

我正在尝试使用访问日志创建S3存储桶,这就是我在yaml中的云形成模板的样子

AccesslogBucket:
    DeletionPolicy: Retain
    Properties:
      BucketEncryption:
        AccessControl: LogDeliveryWrite
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: AES256
      BucketName: accesslog-dub-bucket
      VersioningConfiguration:
        Status: Enabled
    Type: AWS::S3::Bucket
  MyusecaseS3bucket:
    DeletionPolicy: Retain
    DependsOn:
      - AccesslogBucket
    Properties:
      BucketEncryption:
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: AES256
      BucketName: my-usecase-s3-bucket
      LoggingConfiguration:
        DestinationBucketName: accesslog-dub-bucket
        LogFilePrefix: log-
      VersioningConfiguration:
        Status: Enabled
    Type: AWS::S3::Bucket

但是cloudformation模板给了我一个异常
遇到不支持的属性AccessControl
,我看到我在正确的部分(即Accesslogbucket的属性部分)声明了“AccessControl”,并且它是有效的,所以我不确定哪里出了问题。有人能告诉我这里的问题以及如何纠正它吗。

您将您的
访问控制:LogDeliveryWrite
放在
BucketEncryption
下,这是不正确的。它应该在
属性
下。基本上,仔细检查您的缩进:

AccesslogBucket:
    DeletionPolicy: Retain
    Properties:
      AccessControl: LogDeliveryWrite    
      BucketEncryption:       
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: AES256