Show plan
```terraform
Resource actions are indicated with the following symbols:
~ update in-place
Terraform will perform the following actions:
# aws_cloudfront_distribution.simplify_privacy_app_cf_distribution will be updated in-place
~ resource "aws_cloudfront_distribution" "simplify_privacy_app_cf_distribution" {
+ default_root_object = ""
id = "E2KDGWZI9S6D8X"
tags = {
"CostCentre" = "simplify-privacy-statements-production"
"Terraform" = "true"
}
# (19 unchanged attributes hidden)
# Warning: this block will be marked as sensitive and will not
# display in UI output after applying this change.
~ origin {
# At least one attribute in this block is (or was) sensitive,
# so its contents will not be displayed.
}
# (4 unchanged blocks hidden)
}
Plan: 0 to add, 1 to change, 0 to destroy.
Warning: Argument is deprecated
with module.log_bucket.aws_s3_bucket.this,
on .terraform/modules/log_bucket/S3_log_bucket/main.tf line 8, in resource "aws_s3_bucket" "this":
8: resource "aws_s3_bucket" "this" {
Use the aws_s3_bucket_server_side_encryption_configuration resource instead
(and 3 more similar warnings elsewhere)
─────────────────────────────────────────────────────────────────────────────
Saved the plan to: plan.tfplan
To perform exactly these actions, run the following command to apply:
terraform apply "plan.tfplan"
```
Show Conftest results
```sh
18 tests, 18 passed, 0 warnings, 0 failures, 0 exceptions
```
Summary | Résumé
Added a way to prevent direct access to the app from the lambda function URL