Skip to content

Latest commit

 

History

History
71 lines (57 loc) · 5.29 KB

File metadata and controls

71 lines (57 loc) · 5.29 KB

s3_bucket

Features

  • Create secure S3 bucket for AWS services

Requirements

Name Version
terraform >= 1.1.4
aws >= 4.1.0
time >= 0.7.2

Providers

Name Version
aws 4.2.0
aws.org-master 4.2.0
time 0.7.2

Modules

Name Source Version
label cloudposse/label/null 0.25.0

Resources

Name Type
aws_s3_bucket.self resource
aws_s3_bucket_ownership_controls.self resource
aws_s3_bucket_policy.default resource
aws_s3_bucket_public_access_block.self resource
aws_s3_bucket_server_side_encryption_configuration.self resource
aws_s3_bucket_versioning.self resource
time_sleep.wait_for_aws_s3_bucket_settings resource
aws_caller_identity.current data source
aws_iam_account_alias.current data source
aws_iam_policy_document.aggregated_policy data source
aws_iam_policy_document.s3_cloud_trail data source
aws_iam_policy_document.s3_config data source
aws_iam_policy_document.s3_flow_logs data source
aws_iam_policy_document.s3_secure data source
aws_organizations_organization.org data source
aws_region.current data source

Inputs

Name Description Type Default Required
bucket_custom_policy_json Custom S3 bucket policy override JSON string "" no
cloudtrail_s3_key_prefix S3 key prefix for CloudTrail string "cloudtrail" no
config_s3_bucket_key_prefix S3 key prefix for Config string "config" no
enable Enable managing S3 buckets bool true no
enable_versioning Enable S3 object versioning bool true no
force_destroy Allow destroy of S3 bucket with objects bool false no
kms_master_key_arn The AWS KMS master key ARN used for the SSE-KMS encryption. The default aws/s3 AWS AES256 master key is used if this element is absent string "" no
tags Specifies object tags key and value. This applies to all resources created by this module. map(any)
{
"Environment": "infra",
"Product": "security",
"Terraform": true
}
no
vpc_flow_logs_s3_key_prefix S3 key prefix for VPC Flow Logs string "flow-logs" no

Outputs

Name Description
s3_bucket_arn S3 Bucket ARN
s3_bucket_name S3 Bucket Name