Update s3.tf

kariemoorman · Apr 26, 2024 · 802a393 · 802a393
1 parent 96d3aa6
commit 802a393
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/tf/step2_cf-only/s3.tf b/tf/step2_cf-only/s3.tf
@@ -76,3 +76,13 @@ resource "aws_s3_bucket_logging" "s3log" {
   target_bucket = aws_s3_bucket.log_bucket.id
   target_prefix = "log/"
 }
+
+# Encrypt S3 bucket using SSE-S3
+resource "aws_s3_bucket_server_side_encryption_configuration" "logs3-encrypt" {
+  bucket = aws_s3_bucket.log_bucket.id
+  rule {
+    apply_server_side_encryption_by_default {
+      sse_algorithm = "AES256"
+    }
+  }
+}