-
Notifications
You must be signed in to change notification settings - Fork 2
/
master_s3.tf
41 lines (33 loc) · 1.04 KB
/
master_s3.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
# ------------------------------------------------------------------------------
# Master Bucket
# ------------------------------------------------------------------------------
module "master" {
source = "terraform-aws-modules/s3-bucket/aws"
version = "v2.9.0"
providers = { aws = aws.master }
bucket = local.master_bucket_id
acl = "private"
block_public_acls = true
block_public_policy = true
restrict_public_buckets = true
ignore_public_acls = true
force_destroy = var.prevent_destroy ? false : true
versioning = {
enabled = true
}
server_side_encryption_configuration = {
rule = {
bucket_key_enabled = true
apply_server_side_encryption_by_default = {
kms_master_key_id = aws_kms_key.master.arn
sse_algorithm = "aws:kms"
}
}
}
lifecycle_rule = local.common_lifecycle_rules
replication_configuration = local.replication_configuration
tags = merge(
module.labels.tags,
tomap({ "Name" = local.master_bucket_id })
)
}