T1562.008-1.tf

terraform {
  required_version = ">= 0.12"
}

provider "aws" {
}

variable "cloudtrail_name" {
}

variable "s3_bucket_name" {
}

variable "region" {
}

resource "aws_s3_bucket" "some_bucket" {
  bucket        = var.s3_bucket_name
  force_destroy = true
}

resource "aws_s3_bucket_policy" "some_policy" {
  bucket = aws_s3_bucket.some_bucket.id
  policy = templatefile("policy.json", {
    cloudtrail_name = "${var.cloudtrail_name}"
    s3_bucket_name  = "${var.s3_bucket_name}"
    region          = "${var.region}"
  })
}

resource "aws_cloudtrail" "some_cloudtrail" {
  s3_bucket_name = aws_s3_bucket.some_bucket.id
  name           = var.cloudtrail_name
}