Skip to content

Migrate Pub Infra Attachments Bucket to Module...#4222

Open
dj-maisy wants to merge 6 commits into
mainfrom
dj-maisy/3887-migrate-attachments-s3-config
Open

Migrate Pub Infra Attachments Bucket to Module...#4222
dj-maisy wants to merge 6 commits into
mainfrom
dj-maisy/3887-migrate-attachments-s3-config

Conversation

@dj-maisy
Copy link
Copy Markdown
Member

@dj-maisy dj-maisy commented May 19, 2026

What?

This migrates the Attachments S3 Terraform to use the standard module, and...

  • Updates the S3 module to support overriding the object ownership setting Enable object owner enforcement on the bucket and remove it's acl meaning access is now fully controlled by bucket policy

This bucket appears unused now, the only policies I can find have all long been removed, and the number of objects and total size hasn't changed in the full 15 Months of cloudwatch metric histor3

Related

dj-maisy and others added 3 commits May 21, 2026 10:50
...and...

* Update module to override object ownership setting
* Update any affected modules to prevent false drift
@jfharden jfharden force-pushed the dj-maisy/3887-migrate-attachments-s3-config branch from ae649c0 to 620909c Compare May 21, 2026 09:50
@jfharden jfharden force-pushed the dj-maisy/3887-migrate-attachments-s3-config branch from 7504bc4 to 78eb7db Compare May 21, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Migrate terraform/deployments/govuk-publishing-infrastructure/attachments_s3.tf to S3 Shared Module

2 participants