s3_bucket

s3_bucket

Features

• Create secure S3 bucket for AWS services

Requirements

Name	Version
terraform	>= 1.1.4
aws	>= 4.1.0
time	>= 0.7.2

Providers

Name	Version
aws	4.2.0
aws.org-master	4.2.0
time	0.7.2

Modules

Name	Source	Version
label	cloudposse/label/null	0.25.0

Resources

Name	Type
aws_s3_bucket.self	resource
aws_s3_bucket_ownership_controls.self	resource
aws_s3_bucket_policy.default	resource
aws_s3_bucket_public_access_block.self	resource
aws_s3_bucket_server_side_encryption_configuration.self	resource
aws_s3_bucket_versioning.self	resource
time_sleep.wait_for_aws_s3_bucket_settings	resource
aws_caller_identity.current	data source
aws_iam_account_alias.current	data source
aws_iam_policy_document.aggregated_policy	data source
aws_iam_policy_document.s3_cloud_trail	data source
aws_iam_policy_document.s3_config	data source
aws_iam_policy_document.s3_flow_logs	data source
aws_iam_policy_document.s3_secure	data source
aws_organizations_organization.org	data source
aws_region.current	data source

Inputs

Name	Description	Type	Default	Required
bucket_custom_policy_json	Custom S3 bucket policy override JSON	string	""	no
cloudtrail_s3_key_prefix	S3 key prefix for CloudTrail	string	"cloudtrail"	no
config_s3_bucket_key_prefix	S3 key prefix for Config	string	"config"	no
enable	Enable managing S3 buckets	bool	true	no
enable_versioning	Enable S3 object versioning	bool	true	no
force_destroy	Allow destroy of S3 bucket with objects	bool	false	no
kms_master_key_arn	The AWS KMS master key ARN used for the SSE-KMS encryption. The default aws/s3 AWS AES256 master key is used if this element is absent	string	""	no
tags	Specifies object tags key and value. This applies to all resources created by this module.	map(any)	{ "Environment": "infra", "Product": "security", "Terraform": true }	no
vpc_flow_logs_s3_key_prefix	S3 key prefix for VPC Flow Logs	string	"flow-logs"	no

Outputs

Name	Description
s3_bucket_arn	S3 Bucket ARN
s3_bucket_name	S3 Bucket Name