lacework / terraform-aws-cloudtrail

Terraform module for configuring an integration with Lacework and AWS for CloudTrail analysis
6 stars 21 forks source link

fix: log_bucket deny policy #150

Closed jon-stewart closed 1 year ago

jon-stewart commented 1 year ago

Summary

AWS S3 are changing the behaviour of S3 deny policies that refer to the root account. The root account identifier will be expanded to include all principles in the account.

This is a lint exercise.

https://www.k9security.io/posts/2023/10/how-s3-is-changing-the-handling-of-the-root-identity-in-bucket-policy-on-october-20-2023/

How did you test this change?

terraform-customerdemo

https://g.codefresh.io/build/652cfda770e5aa5eb7986051?step=TerraformPlan&tab=output&logs=terminal

Issue

https://lacework.atlassian.net/browse/GROW-2444

jon-stewart commented 1 year ago

Closes #146