45 lines
1.0 KiB
HCL
45 lines
1.0 KiB
HCL
# terraform {
|
|
# required_providers {
|
|
# aws = {
|
|
# source = "hashicorp/aws"
|
|
# version = "~> 6.0"
|
|
# }
|
|
# }
|
|
# }
|
|
|
|
# provider "aws" {
|
|
# region = "us-east-1"
|
|
# }
|
|
|
|
resource "aws_s3_bucket" "datacenter" {
|
|
bucket = "datacenter-s3-30377"
|
|
}
|
|
|
|
# Re-enable ACLs (default is BucketOwnerEnforced, which disables them)
|
|
resource "aws_s3_bucket_ownership_controls" "datacenter" {
|
|
bucket = aws_s3_bucket.datacenter.id
|
|
rule {
|
|
object_ownership = "BucketOwnerPreferred"
|
|
}
|
|
}
|
|
|
|
# Lift the public-access block so a public ACL is allowed
|
|
resource "aws_s3_bucket_public_access_block" "datacenter" {
|
|
bucket = aws_s3_bucket.datacenter.id
|
|
|
|
block_public_acls = false
|
|
block_public_policy = false
|
|
ignore_public_acls = false
|
|
restrict_public_buckets = false
|
|
}
|
|
|
|
# Now the public ACL will actually take
|
|
resource "aws_s3_bucket_acl" "datacenter" {
|
|
bucket = aws_s3_bucket.datacenter.id
|
|
acl = "public-read"
|
|
|
|
depends_on = [
|
|
aws_s3_bucket_ownership_controls.datacenter,
|
|
aws_s3_bucket_public_access_block.datacenter,
|
|
]
|
|
} |