From 39aa6facd9ebc5d9d869817ee1a6e491dbc9417c Mon Sep 17 00:00:00 2001 From: Annie Ku Date: Tue, 10 Dec 2019 10:49:12 -0800 Subject: [PATCH] enforcing SSL for every action (#157) fix:aws-s3-private-bucket:Bucket policy enforces SecureTransport for all actions --- aws-s3-private-bucket/main.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/aws-s3-private-bucket/main.tf b/aws-s3-private-bucket/main.tf index 4b9d621a..63ab00d8 100755 --- a/aws-s3-private-bucket/main.tf +++ b/aws-s3-private-bucket/main.tf @@ -69,8 +69,8 @@ data "aws_iam_policy_document" "bucket_policy" { source_json = "${var.bucket_policy}" statement { - sid = "EnforceHTTPS" - actions = ["s3:GetObject"] + sid = "EnforceTLS" + actions = ["*"] resources = ["arn:aws:s3:::${var.bucket_name}/*"] principals {