jlengrand/engine
1
0
Fork 0
mirror of https://github.com/jlengrand/engine.git synced 2026-03-10 08:11:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(ENG_1103): disable s3 public access (#586)

Browse Source
This commit is contained in:
MacLikorne
2022-02-07 15:01:40 +01:00
committed by GitHub
parent 65be37693f
commit 21bbdbbf14
2 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lib/aws/bootstrap/helm-loki.j2.tf
View File

@@ -64,4 +64,11 @@ resource "aws_s3_bucket" "loki_bucket" {
"Name" = "Applications logs"
}
)
}
resource "aws_s3_bucket_public_access_block" "loki_access" {
bucket = aws_s3_bucket.loki_bucket.id
ignore_public_acls = true
restrict_public_buckets = true
}

7
lib/aws/bootstrap/s3-qovery-buckets.tf
View File

@@ -33,3 +33,10 @@ resource "aws_kms_key" "s3_kubeconfig_kms_encryption" {
}
)
}
resource "aws_s3_bucket_public_access_block" "kubeconfigs_access" {
bucket = aws_s3_bucket.kubeconfigs_bucket.id
ignore_public_acls = true
restrict_public_buckets = true
}