ManagedKube / kubernetes-ops

Running Kubernetes in production
Apache License 2.0
297 stars 136 forks source link

S3 bucket ownership controls rule #420

Closed bcarranza closed 1 year ago

bcarranza commented 1 year ago

What

Motivation

Test cases

inputs = {
  aws_region              = local.aws_region
  bucket                  = local.bucket_name
  acl                     = "private"
  block_public_acls       = false
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
  ## Policy
  ## * https only: https://aws.amazon.com/premiumsupport/knowledge-center/s3-bucket-policy-for-config-rule/
  policy                  = templatefile(
                              "./policy.json",
                              {
                                bucket_name    = local.bucket_name
                                aws_region     = local.aws_region
                                account_number = local.account_id

                              }
                            )
  enable_versioning              = true
  enable_logging                 = true
  enable_bucket_owner_enforced   = true
  bucket_ownership_controls_rule = "BucketOwnerPreferred"
  logging_bucket_name            = local.bucket_name
  tags                           = local.tags
}


- how looks like in aws console.
![Screenshot 2023-03-09 at 09 58 46](https://user-images.githubusercontent.com/19688747/224080817-ac4b2417-4c98-4afb-9222-ff564a02f900.png)