57 lines
1.3 KiB
HCL
57 lines
1.3 KiB
HCL
# Thanks to https://blog.gruntwork.io/how-to-manage-terraform-state-28f5697e68fa
|
|
|
|
resource "aws_s3_bucket" "terraform_state" {
|
|
bucket = "omnicognate-terraform-state"
|
|
|
|
# Prevent accidental deletion of this S3 bucket
|
|
lifecycle {
|
|
prevent_destroy = true
|
|
}
|
|
tags = merge(
|
|
{ Name = "${var.resource_name_prefix}-aws_s3_bucket" },
|
|
var.common_tags,
|
|
)
|
|
}
|
|
|
|
resource "aws_s3_bucket_versioning" "enabled" {
|
|
bucket = aws_s3_bucket.terraform_state.id
|
|
versioning_configuration {
|
|
status = "Enabled"
|
|
}
|
|
|
|
}
|
|
|
|
resource "aws_s3_bucket_server_side_encryption_configuration" "default" {
|
|
bucket = aws_s3_bucket.terraform_state.id
|
|
|
|
rule {
|
|
apply_server_side_encryption_by_default {
|
|
sse_algorithm = "AES256"
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
resource "aws_s3_bucket_public_access_block" "public_access" {
|
|
bucket = aws_s3_bucket.terraform_state.id
|
|
block_public_acls = true
|
|
block_public_policy = true
|
|
ignore_public_acls = true
|
|
restrict_public_buckets = true
|
|
|
|
}
|
|
|
|
resource "aws_dynamodb_table" "terraform_locks" {
|
|
name = "omnicognate-terraform-locks"
|
|
billing_mode = "PAY_PER_REQUEST"
|
|
hash_key = "LockID"
|
|
|
|
attribute {
|
|
name = "LockID"
|
|
type = "S"
|
|
}
|
|
tags = merge(
|
|
{ Name = "${var.resource_name_prefix}-aws_dynamodb_table" },
|
|
var.common_tags,
|
|
)
|
|
} |