mirror of
https://github.com/gravitational/teleport.git
synced 2026-09-24 16:17:11 +08:00
terraform: enable ACLs in the certs bucket (#25113)
This commit is contained in:
@@ -7,8 +7,9 @@ resource "aws_s3_bucket" "certs" {
|
||||
}
|
||||
|
||||
resource "aws_s3_bucket_acl" "certs" {
|
||||
bucket = aws_s3_bucket.certs.bucket
|
||||
acl = "private"
|
||||
depends_on = [aws_s3_bucket_ownership_controls.certs]
|
||||
bucket = aws_s3_bucket.certs.bucket
|
||||
acl = "private"
|
||||
}
|
||||
|
||||
// For demo purposes, CMK is not needed
|
||||
@@ -23,6 +24,14 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "certs" {
|
||||
}
|
||||
}
|
||||
|
||||
resource "aws_s3_bucket_ownership_controls" "certs" {
|
||||
bucket = aws_s3_bucket.certs.id
|
||||
|
||||
rule {
|
||||
object_ownership = "BucketOwnerPreferred"
|
||||
}
|
||||
}
|
||||
|
||||
resource "aws_s3_bucket_versioning" "certs" {
|
||||
bucket = aws_s3_bucket.certs.bucket
|
||||
|
||||
|
||||
Reference in New Issue
Block a user