terraform: enable ACLs in the certs bucket (#25113)

This commit is contained in:
Hugo Shaka
2023-04-28 16:42:39 +00:00
committed by GitHub
parent fd45262c9e
commit 2966623cd0
@@ -7,8 +7,9 @@ resource "aws_s3_bucket" "certs" {
}
resource "aws_s3_bucket_acl" "certs" {
bucket = aws_s3_bucket.certs.bucket
acl = "private"
depends_on = [aws_s3_bucket_ownership_controls.certs]
bucket = aws_s3_bucket.certs.bucket
acl = "private"
}
// For demo purposes, CMK is not needed
@@ -23,6 +24,14 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "certs" {
}
}
resource "aws_s3_bucket_ownership_controls" "certs" {
bucket = aws_s3_bucket.certs.id
rule {
object_ownership = "BucketOwnerPreferred"
}
}
resource "aws_s3_bucket_versioning" "certs" {
bucket = aws_s3_bucket.certs.bucket