- Create secure S3 bucket for AWS services
| Name | Version |
|---|---|
| terraform | >= 1.1.4 |
| aws | >= 4.1.0 |
| time | >= 0.7.2 |
| Name | Version |
|---|---|
| aws | 4.2.0 |
| aws.org-master | 4.2.0 |
| time | 0.7.2 |
| Name | Source | Version |
|---|---|---|
| label | cloudposse/label/null | 0.25.0 |
| Name | Type |
|---|---|
| aws_s3_bucket.self | resource |
| aws_s3_bucket_ownership_controls.self | resource |
| aws_s3_bucket_policy.default | resource |
| aws_s3_bucket_public_access_block.self | resource |
| aws_s3_bucket_server_side_encryption_configuration.self | resource |
| aws_s3_bucket_versioning.self | resource |
| time_sleep.wait_for_aws_s3_bucket_settings | resource |
| aws_caller_identity.current | data source |
| aws_iam_account_alias.current | data source |
| aws_iam_policy_document.aggregated_policy | data source |
| aws_iam_policy_document.s3_cloud_trail | data source |
| aws_iam_policy_document.s3_config | data source |
| aws_iam_policy_document.s3_flow_logs | data source |
| aws_iam_policy_document.s3_secure | data source |
| aws_organizations_organization.org | data source |
| aws_region.current | data source |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| bucket_custom_policy_json | Custom S3 bucket policy override JSON | string |
"" |
no |
| cloudtrail_s3_key_prefix | S3 key prefix for CloudTrail | string |
"cloudtrail" |
no |
| config_s3_bucket_key_prefix | S3 key prefix for Config | string |
"config" |
no |
| enable | Enable managing S3 buckets | bool |
true |
no |
| enable_versioning | Enable S3 object versioning | bool |
true |
no |
| force_destroy | Allow destroy of S3 bucket with objects | bool |
false |
no |
| kms_master_key_arn | The AWS KMS master key ARN used for the SSE-KMS encryption. The default aws/s3 AWS AES256 master key is used if this element is absent |
string |
"" |
no |
| tags | Specifies object tags key and value. This applies to all resources created by this module. | map(any) |
{ |
no |
| vpc_flow_logs_s3_key_prefix | S3 key prefix for VPC Flow Logs | string |
"flow-logs" |
no |
| Name | Description |
|---|---|
| s3_bucket_arn | S3 Bucket ARN |
| s3_bucket_name | S3 Bucket Name |