Skip to content

Commit 78eb7db

Browse files
committed
Remove bucket acl and add public access block for attachments s3 bucket
1 parent 5cd0cf2 commit 78eb7db

1 file changed

Lines changed: 2 additions & 9 deletions

File tree

terraform/deployments/govuk-publishing-infrastructure/attachments_s3.tf

Lines changed: 2 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,8 @@ module "secure_s3_bucket_attachments" {
1616

1717
name = "govuk-attachments-${var.govuk_environment}"
1818

19-
enforce_bucket_object_ownership = false
20-
enable_public_access_block = false
21-
lifecycle_rules = var.govuk_environment == "integration" ? local.lifecycle_rules_integration : null
22-
versioning_enabled = var.govuk_environment == "production" ? true : false
23-
}
24-
25-
resource "aws_s3_bucket_acl" "attachments" {
26-
bucket = module.secure_s3_bucket_attachments.name
27-
acl = "private"
19+
lifecycle_rules = var.govuk_environment == "integration" ? local.lifecycle_rules_integration : null
20+
versioning_enabled = var.govuk_environment == "production" ? true : false
2821
}
2922

3023
moved {

0 commit comments

Comments
 (0)