Hello,
We have implemented event based remediation on S3 services with cloudcustodian to forbid public access and have regularly technical issue form AWS :
A conflicting conditional operation is currently in progress against. Please try again
We use following configuration
policies:
- name: s3-delete-global-grants
resource: s3
filters:
- type: global-grants
mode:
type: cloudtrail
events:
- source: s3.amazonaws.com
event: PutBucketAcl
ids:requestParameters.bucketName
actions:
- delete-global-grants
grantes:
- "http://acs.amazonaws.com/groups/global/AllUsers"
- "http://acs.amazonaws.com/groups/global/AuthenticatedUsers"
Is there a way to make a retry in action block ?
How to manage this issue.
Thanks in advance