Merge pull request #7 from dshmelev/master

Enable S3 access control lists (ACLs)
jetbrains-infra · Apr 21, 2023 · 405ea5a · 405ea5a
2 parents 7da1f26 + 33f92fa
commit 405ea5a
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/s3_bucket.tf b/s3_bucket.tf
@@ -13,6 +13,14 @@ resource "aws_s3_bucket" "logs" {
   tags = local.tags
 }
 
+resource "aws_s3_bucket_ownership_controls" "logs" {
+  depends_on = [aws_s3_bucket_policy.logs]
+  bucket = aws_s3_bucket.logs.id
+  rule {
+    object_ownership = "ObjectWriter"
+  }
+}
+
 resource "aws_s3_bucket_policy" "logs" {
   bucket = aws_s3_bucket.logs.id
   policy = data.aws_iam_policy_document.bucket_policy.json