Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
Is your feature request related to a problem? Please describe.
Using target S3 buckets with Object Lock for your Amazon CloudTrail trails will help ensure log data integrity as the log files stored within these buckets can't be accidentally or intentionally deleted. S3 Object Lock feature can also help you meet regulatory requirements within your organization when it comes to data protection.
Describe the solution you'd like
Current code doesn't support ability to enable object lock during s3 bucket creation. It would be nice to add such variable for S3 bucket.
Is your feature request related to a problem? Please describe.
Using target S3 buckets with Object Lock for your Amazon CloudTrail trails will help ensure log data integrity as the log files stored within these buckets can't be accidentally or intentionally deleted. S3 Object Lock feature can also help you meet regulatory requirements within your organization when it comes to data protection.
Describe the solution you'd like
Current code doesn't support ability to enable object lock during s3 bucket creation. It would be nice to add such variable for S3 bucket.
Additional context
This is known as Medium risk level