Merge pull request #68 from nhsconnect/PRMT-4477

PRMT-4477
nhsconnect · Feb 15, 2024 · 90c83f1 · 90c83f1
2 parents e830ab0 + dae6ec6
commit 90c83f1
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/terraform/s3.tf b/terraform/s3.tf
@@ -52,8 +52,10 @@ resource "aws_s3_bucket_versioning" "ehr_repo_bucket" {
 resource "aws_s3_bucket_public_access_block" "ehr_repo_access_block" {
   bucket = aws_s3_bucket.ehr-repo-bucket.bucket
 
-  block_public_acls   = true
-  block_public_policy = true
+  block_public_acls       = true
+  block_public_policy     = true
+  ignore_public_acls      = true
+  restrict_public_buckets = true
 }
 
 resource "aws_s3_bucket_policy" "ehr-repo-bucket_policy" {
@@ -116,8 +118,10 @@ resource "aws_s3_bucket_versioning" "ehr_repo_access_logs" {
 resource "aws_s3_bucket_public_access_block" "ehr_repo_access_logs_access_block" {
   bucket = aws_s3_bucket.ehr_repo_access_logs.bucket
 
-  block_public_acls   = true
-  block_public_policy = true
+  block_public_acls       = true
+  block_public_policy     = true
+  ignore_public_acls      = true
+  restrict_public_buckets = true
 }
 
 resource "aws_s3_bucket_policy" "ehr_repo_permit_developer_to_see_access_logs_policy" {