Explorar o código

Corrected 'kms_master_key_id'

Jeremy Cooper [AFS MBP] %!s(int64=3) %!d(string=hai) anos
pai
achega
b98bb22063
Modificáronse 1 ficheiros con 5 adicións e 2 borrados
  1. 5 2
      base/teleport-single-instance/s3.tf

+ 5 - 2
base/teleport-single-instance/s3.tf

@@ -17,15 +17,18 @@ resource "aws_s3_bucket_acl" "s3_acl_storage" {
 
 resource "aws_s3_bucket_server_side_encryption_configuration" "s3_sse_storage" {
   bucket = aws_s3_bucket.storage.id
+
   rule {
     apply_server_side_encryption_by_default {
-        sse_algorithm = "aws:kms"
+        kms_master_key_id = aws_kms_key.s3.arn
+        sse_algorithm     = "aws:kms"
       }
     }
 }
 
 resource "aws_s3_bucket_lifecycle_configuration" "s3_lifecyle_storage" {
-  bucket   = aws_s3_bucket.storage.id
+  bucket = aws_s3_bucket.storage.id
+
   rule {
     id     = "DeleteAfter90Days"
     status = "Enabled"