From ebab31bcb741679b80d57fcab7f113e1d7781f6c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 1 Jun 2026 09:52:58 +0000
Subject: [PATCH 1/2] Initial plan


From 467a5754787fc8397cbd7ab46b0a57b05ffe0c86 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 1 Jun 2026 10:01:56 +0000
Subject: [PATCH 2/2] fix: set valid S3 canned ACL in dynamodb CDC to-s3
 example

---
 modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml b/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml
index d13686f4..5e0c9c4c 100644
--- a/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml
+++ b/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml
@@ -30,6 +30,7 @@ output:
     bucket: ${S3_BUCKET}
     path: dynamodb-cdc/${DYNAMODB_TABLE}/${! @s3_path }/${! uuid_v4() }.json
     region: ${AWS_REGION}
+    object_canned_acl: private
     batching:
       count: 1000
       period: 1m