$ aws s3api put-bucket-acl \
--bucket ${S3_BUCKET_NAME} \
--grant-write 'URI="http://acs.amazonaws.com/groups/s3/LogDelivery"' \
--grant-read-acp 'URI="http://acs.amazonaws.com/groups/s3/LogDelivery"'

{
  "ErrorDocument": {
    "Key": "error.html"
  },
  "IndexDocument": {
    "Suffix": "index.html"
  }
}

$ aws s3api put-bucket-website \
--generate-cli-skeleton yaml-input
Bucket: ''  # [REQUIRED] The bucket name.
ContentMD5: '' # The base64-encoded 128-bit MD5 digest of the data.
WebsiteConfiguration: # [REQUIRED] Container for the request.
  ErrorDocument:  # The name of the error document for the website.
    Key: ''  # [REQUIRED] The object key name to use when a 4XX class error occurs.
  IndexDocument: # The name of the index document for the website.
    Suffix: ''  # [REQUIRED] A suffix that is appended to a request that is for a directory on the website endpoint (for example,if the suffix is index.
  RedirectAllRequestsTo: # The redirect behavior for every request to this bucket's website endpoint.
    HostName: ''  # [REQUIRED] Name of the host where requests are redirected.
    Protocol: https # Protocol to use when redirecting requests. Valid values are: http, https.
  RoutingRules: # Rules that define when a redirect is applied and the redirect behavior.
  - Condition:  # A container for describing a condition that must be met for the specified redirect to apply.
      HttpErrorCodeReturnedEquals: ''  # The HTTP error code when the redirect is applied.
      KeyPrefixEquals: '' # The object key name prefix when the redirect is applied.
    Redirect: # [REQUIRED] Container for redirect information.
      HostName: ''  # The host name to use in the redirect request.
      HttpRedirectCode: '' # The HTTP redirect code to use on the response.
      Protocol: https # Protocol to use when redirecting requests. Valid values are: http, https.
      ReplaceKeyPrefixWith: '' # The object key prefix to use in the redirect request.
      ReplaceKeyWith: '' # The specific object key to use in the redirect request.
ExpectedBucketOwner: '' # The account id of the expected bucket owner.

$ aws s3api get-bucket-logging \
--bucket ${S3_BUCKET_NAME}
{
    "LoggingEnabled": {
        "TargetBucket": "handson-cli-s3-website-logging-website-1234XXXXXXXX-log",
        "TargetPrefix": "/"
    }
}

$ aws s3 ls s3://${S3_BUCKET_NAME}-log/
                           PRE /

$ aws s3 ls s3://${S3_BUCKET_NAME}-log//
2020-09-24 11:17:40        636 2020-09-24-11-17-39-D5F59C25B3841CAF
2020-09-24 11:17:43       2981 2020-09-24-11-17-42-83D41566B32CB6A7
2020-09-24 11:17:47        720 2020-09-24-11-17-46-2283C60C4B76D482
2020-09-24 11:17:50        656 2020-09-24-11-17-49-F938F6B946395166
2020-09-24 11:17:52        720 2020-09-24-11-17-51-70439B9BAD87B553
2020-09-24 11:18:12        720 2020-09-24-11-18-11-2FEBA44AFEB0C91D
2020-09-24 11:18:15        720 2020-09-24-11-18-14-A7A7F94850ED3EAD
2020-09-24 11:19:10        720 2020-09-24-11-19-09-56EBF4C2C6EA75BB
2020-09-24 11:19:36       1387 2020-09-24-11-19-35-0F6E11B37CB0113E

import * as cdk from '@aws-cdk/core';
import s3 = require('@aws-cdk/aws-s3');

export class S3WithAwsIdStack extends cdk.Stack {
  constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    const bucketName: string = `sample-bucket-${this.account}`;
    const bucket: s3.Bucket = new s3.Bucket(this, 'SampleBucketWithAccountID', {
      bucketName,
      publicReadAccess: true,
      websiteIndexDocument: 'index.html',
      websiteErrorDocument: 'error.html',
      removalPolicy: cdk.RemovalPolicy.DESTROY
    });
  }
}

Resources:
  SampleBucketWithAccountID62145D3E:
    Type: AWS::S3::Bucket
    Properties:
      BucketName:
        Fn::Join:
          - ""
          - - sample-bucket-
            - Ref: AWS::AccountId
      WebsiteConfiguration:
        ErrorDocument: error.html
        IndexDocument: index.html
    UpdateReplacePolicy: Delete
    DeletionPolicy: Delete

$ AWS_ID=$( \
  aws sts get-caller-identity \
    --query 'Account' \
    --output text \
) \
&& echo ${AWS_ID}

$ aws sts get-caller-identity help
...
NAME
       get-caller-identity -

DESCRIPTION
       Returns  details  about the IAM user or role whose credentials are used
       to call the operation.

       NOTE:
          No permissions are required to perform this operation. If an  admin-
          istrator  adds  a  policy  to  your IAM user or role that explicitly
          denies access to the sts:GetCallerIdentity  action,  you  can  still
          perform  this  operation.  Permissions  are not required because the
          same information is returned when an IAM  user  or  role  is  denied
          access. To view an example response, see I Am Not Authorized to Per-
          form: iam:DeleteVirtualMFADevice in the IAM User Guide .

       See also: AWS API Documentation

       See 'aws help' for descriptions of global parameters.

SYNOPSIS
            get-caller-identity
          [--cli-input-json | --cli-input-yaml]
          [--generate-cli-skeleton <value>]
          [--cli-auto-prompt <value>]

$ aws sts get-caller-identity                                                                                                            
{
    "UserId": "AROAJC7BA46AREMWOJDPW:i-12345abcde8cXXXXX",
    "Account": "1234XXXXXXXX",
    "Arn": "arn:aws:sts::1234XXXXXXXX:assumed-role/handson-cloud9-environment-role/i-12345abcde8cXXXXX"
}