Skip to content

Commit e2f9ee1

Browse files
authored
Merge pull request #6 from rhythmictech/NOC-13028
NOC-13028
2 parents 965bf71 + 17bccdb commit e2f9ee1

File tree

1 file changed

+0
-36
lines changed

1 file changed

+0
-36
lines changed

main.tf

Lines changed: 0 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -61,42 +61,6 @@ resource "aws_s3_bucket_public_access_block" "this" {
6161
}
6262

6363
data "aws_iam_policy_document" "this" {
64-
statement {
65-
sid = "DenyIncorrectEncryptionHeader"
66-
actions = ["s3:PutObject*"]
67-
effect = "Deny"
68-
resources = ["${aws_s3_bucket.this.arn}/*"]
69-
70-
condition {
71-
test = "StringNotEquals"
72-
variable = "s3:x-amz-server-side-encryption"
73-
values = ["AES256"]
74-
}
75-
76-
principals {
77-
identifiers = ["*"]
78-
type = "AWS"
79-
}
80-
}
81-
82-
statement {
83-
sid = "DenyUnEncryptedObjectUploads"
84-
actions = ["s3:PutObject*"]
85-
effect = "Deny"
86-
resources = ["${aws_s3_bucket.this.arn}/*"]
87-
88-
condition {
89-
test = "Null"
90-
variable = "s3:x-amz-server-side-encryption"
91-
values = [true]
92-
}
93-
94-
principals {
95-
identifiers = ["*"]
96-
type = "AWS"
97-
}
98-
}
99-
10064
dynamic "statement" {
10165
for_each = var.allowed_account_ids
10266

0 commit comments

Comments
 (0)