Merge pull request #13 from trussworks/add_s3_kms

mr337 · web-flow · commit 222c064d1d36 · 2020-10-12T17:38:07.000-05:00
Adding S3 KMS as encryption option for S3 SCP
diff --git a/main.tf b/main.tf
@@ -239,7 +239,7 @@ data "aws_iam_policy_document" "combined_policy_block" {
       condition {
         test     = "StringNotEquals"
         variable = "s3:x-amz-server-side-encryption"
-        values   = ["AES256"]
+        values   = ["AES256", "aws:kms"]
       }
     }
   }

Original file line number	Diff line number	Diff line change
`@@ -239,7 +239,7 @@ data "aws_iam_policy_document" "combined_policy_block" {`
`239`	`239`	`condition {`
`240`	`240`	`test = "StringNotEquals"`
`241`	`241`	`variable = "s3:x-amz-server-side-encryption"`
`242`		`- values = ["AES256"]`
	`242`	`+ values = ["AES256", "aws:kms"]`
`243`	`243`	`}`
`244`	`244`	`}`
`245`	`245`	`}`