server_side_encryption_configuration attribute is deprecated (#7866)

This commit is contained in:
KanchiMoe 2022-09-21 19:25:08 +01:00 committed by GitHub
parent 5920df3f5d
commit cde973293b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -43,17 +43,21 @@ resource "aws_s3_bucket" "osquery-status" { #tfsec:ignore:aws-s3-encryption-cust
} }
} }
server_side_encryption_configuration {
rule {
apply_server_side_encryption_by_default {
sse_algorithm = "aws:kms"
}
}
}
#checkov:skip=CKV_AWS_18:dev env #checkov:skip=CKV_AWS_18:dev env
#checkov:skip=CKV_AWS_144:dev env #checkov:skip=CKV_AWS_144:dev env
#checkov:skip=CKV_AWS_21:dev env #checkov:skip=CKV_AWS_21:dev env
} }
resource "aws_s3_bucket_server_side_encryption_configuration" "osquery-status" {
bucket = aws_s3_bucket.osquery-status.id
rule {
apply_server_side_encryption_by_default {
sse_algorithm = "aws:kms"
}
}
}
resource "aws_s3_bucket_public_access_block" "osquery-status" { resource "aws_s3_bucket_public_access_block" "osquery-status" {
bucket = aws_s3_bucket.osquery-status.id bucket = aws_s3_bucket.osquery-status.id