aws-s3-private-bucket set ignore_public_acls and restrict_public_buck…

…ets (#124)
chanzuckerberg · Sep 17, 2019 · 2faeae6 · 2faeae6
1 parent 8749809
commit 2faeae6
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/aws-s3-private-bucket/main.tf b/aws-s3-private-bucket/main.tf
@@ -37,8 +37,10 @@ resource "aws_s3_bucket" "bucket" {
 resource "aws_s3_bucket_public_access_block" "bucket" {
   bucket = "${aws_s3_bucket.bucket.id}"
 
-  block_public_acls   = true
-  block_public_policy = true
+  block_public_acls       = true
+  block_public_policy     = true
+  ignore_public_acls      = true
+  restrict_public_buckets = true
 }
 
 data "aws_iam_policy_document" "bucket_policy" {