terraform-aws-s3-bucket

This module creates an S3 bucket with versioning, lifecycles, encryption and a default policy.

Basic

• Prevent bucket from being publicly accessible
• Enable default bucket encryption using AES256
• Prevent unencrypted object push (DenyPutObjectWithoutEncryption)

Usage

IMPORTANT: We do not pin modules to versions in our examples because of the difficulty of keeping the versions in the documentation in sync with the latest released versions. We highly recommend that in your code you pin the version to the exact version you are using so that your infrastructure remains stable, and update versions in a systematic way so that they do not catch you by surprise.

module "aws_s3_bucket" {
  source = "git@github.com:gbergeret/terraform-aws-s3-bucket"

  bucket = "assets"

  tags = {
    Environment = "Test"
  }
}

Inputs

Name	Description	Type	Default	Required
bucket	Name of the bucket.	string		yes
policy	Policy to apply on the bucket.	string	{}	no
tags	Map of tags to assign to the bucket.	map(string)	{}	no

Outputs

Name	Description	Type
this	Bucket object. Used to access all bucket properties (e.g. arn)	object

Bucket Policies

Name	Description	Overridable
DenyPutObjectWithoutEncryption	Block push of unencrypted object	no
OnlyAllowSSLRequests	Block unsecure access to S3	no