File tree Expand file tree Collapse file tree 1 file changed +0
-36
lines changed Expand file tree Collapse file tree 1 file changed +0
-36
lines changed Original file line number Diff line number Diff line change @@ -61,42 +61,6 @@ resource "aws_s3_bucket_public_access_block" "this" {
6161}
6262
6363data "aws_iam_policy_document" "this" {
64- statement {
65- sid = " DenyIncorrectEncryptionHeader"
66- actions = [" s3:PutObject*" ]
67- effect = " Deny"
68- resources = [" ${ aws_s3_bucket . this . arn } /*" ]
69-
70- condition {
71- test = " StringNotEquals"
72- variable = " s3:x-amz-server-side-encryption"
73- values = [" AES256" ]
74- }
75-
76- principals {
77- identifiers = [" *" ]
78- type = " AWS"
79- }
80- }
81-
82- statement {
83- sid = " DenyUnEncryptedObjectUploads"
84- actions = [" s3:PutObject*" ]
85- effect = " Deny"
86- resources = [" ${ aws_s3_bucket . this . arn } /*" ]
87-
88- condition {
89- test = " Null"
90- variable = " s3:x-amz-server-side-encryption"
91- values = [true ]
92- }
93-
94- principals {
95- identifiers = [" *" ]
96- type = " AWS"
97- }
98- }
99-
10064 dynamic "statement" {
10165 for_each = var. allowed_account_ids
10266
You can’t perform that action at this time.
0 commit comments