forked from philips-software/terraform-aws-account-setup
-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy paths3.tf
42 lines (37 loc) · 1.31 KB
/
s3.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
// Terraform State S3 buacket
resource "aws_s3_bucket" "kabisa_terraform_statefiles_bucket" {
count = var.s3_bucket_state_file_creation ? 1 : 0
bucket = var.s3_bucket_state_file_name
tags = {
Terraform = true
}
}
resource "aws_s3_bucket_acl" "s3_bucket_private_acl" {
count = var.s3_bucket_state_file_creation ? 1 : 0
bucket = aws_s3_bucket.kabisa_terraform_statefiles_bucket[count.index].id
acl = "private"
depends_on = [aws_s3_bucket_ownership_controls.s3_bucket_acl_ownership]
}
resource "aws_s3_bucket_ownership_controls" "s3_bucket_acl_ownership" {
count = var.s3_bucket_state_file_creation ? 1 : 0
bucket = aws_s3_bucket.kabisa_terraform_statefiles_bucket[count.index].id
rule {
object_ownership = "ObjectWriter"
}
}
resource "aws_s3_bucket_versioning" "versioning_bucket" {
count = var.s3_bucket_state_file_creation ? 1 : 0
bucket = aws_s3_bucket.kabisa_terraform_statefiles_bucket[count.index].id
versioning_configuration {
status = "Enabled"
}
}
resource "aws_s3_bucket_server_side_encryption_configuration" "s3_bucket_encrypt_rule" {
count = var.s3_bucket_state_file_creation ? 1 : 0
bucket = aws_s3_bucket.kabisa_terraform_statefiles_bucket[count.index].id
rule {
apply_server_side_encryption_by_default {
sse_algorithm = "AES256"
}
}
}