terraform-aws-s3logging-bucket

Create and manage a bucket suitable for access logging for other S3 buckets.

Note that due to the way S3 pricing works on IA and Glacier tiers, this module does not support automatic transition policies in the lifecycle rules. It is always cheaper to store ELB access logs in the standard tier.

Usage

module "s3logging-bucket" {
  source        = "rhythmictech/s3logging-bucket/aws"
}

Requirements

Name	Version
terraform	>= 0.12.19

Providers

Name	Version
aws	n/a

Inputs

Name	Description	Type	Default	Required
bucket_name	Name to apply to bucket (use `bucket_name` or `bucket_suffix`)	`string`	`null`	no
bucket_suffix	Suffix to apply to the bucket (use `bucket_name` or `bucket_suffix`). When using `bucket_suffix`, the bucket name will be `[account_id]-[region]-s3logging-[bucket_suffix].`	`string`	`"default"`	no
lifecycle_rules	lifecycle rules to apply to the bucket	list(object( { id = string enabled = bool prefix = string expiration = number noncurrent_version_expiration = number }))	`[]`	no
tags	Tags to add to supported resources	`map(string)`	`{}`	no
versioning_enabled	Whether or not to use versioning on the bucket. This can be useful for audit purposes since objects in a logging bucket should not be updated.	`bool`	`true`	no

Outputs

Name	Description
s3_bucket_arn	The ARN of the bucket
s3_bucket_domain_name	The domain name of the bucket
s3_bucket_name	The name of the bucket

History

Between versions 1.x and 2.x, there were breaking changes. In particular, resource names were changed to follow a this convention. The following commands (with some customization for naming) will automatically migrate existing states:

terraform state mv module.s3logging-bucket.aws_s3_bucket.s3logging_bucket module.s3logging-bucket.aws_s3_bucket.this
terraform state mv module.s3logging-bucket.aws_s3_bucket_public_access_block.block_public_access module.s3logging-bucket.aws_s3_bucket_public_access_block.this

The region var was also been removed.

README.md 2.6 KB History Raw