enforcing SSL for every action (#157)

fix:aws-s3-private-bucket:Bucket policy enforces SecureTransport for all actions
chanzuckerberg · Dec 10, 2019 · 39aa6fa · 39aa6fa
1 parent 190c3c2
commit 39aa6fa
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/aws-s3-private-bucket/main.tf b/aws-s3-private-bucket/main.tf
@@ -69,8 +69,8 @@ data "aws_iam_policy_document" "bucket_policy" {
   source_json = "${var.bucket_policy}"
 
   statement {
-    sid       = "EnforceHTTPS"
-    actions   = ["s3:GetObject"]
+    sid       = "EnforceTLS"
+    actions   = ["*"]
     resources = ["arn:aws:s3:::${var.bucket_name}/*"]
 
     principals {