Update s3.tf

kariemoorman · Apr 26, 2024 · 96d3aa6 · 96d3aa6
1 parent ec2752e
commit 96d3aa6
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/tf/step1/s3.tf b/tf/step1/s3.tf
@@ -76,3 +76,13 @@ resource "aws_s3_bucket_logging" "s3log" {
   target_bucket = aws_s3_bucket.log_bucket.id
   target_prefix = "log/"
 }
+
+# Encrypt S3 bucket using SSE-S3
+resource "aws_s3_bucket_server_side_encryption_configuration" "encrypt" {
+  bucket = aws_s3_bucket.log_bucket.id
+  rule {
+    apply_server_side_encryption_by_default {
+      sse_algorithm = "AES256"
+    }
+  }
+}