Update module_s3_bucket_cloudfront_logging.tf

need to also disable acl for usual cloudfront distros
osodevops · Oct 15, 2024 · 2c68a19 · 2c68a19
1 parent 8ceba33
commit 2c68a19
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/module_s3_bucket_cloudfront_logging.tf b/module_s3_bucket_cloudfront_logging.tf
@@ -5,7 +5,7 @@ module "bucket_cloudwatch_logs_backup" {
   bucket                   = local.logging_bucket_name
   force_destroy            = false
   tags                     = var.common_tags
-  acl                      = var.whitelabel_domain ? null : "private"
+  acl                      = var.whitelabel_domain || var.acl_disabled ? null : "private"
   object_ownership         = "ObjectWriter"
   control_object_ownership = var.whitelabel_domain ? true : false
   attach_access_log_delivery_policy = var.whitelabel_domain ? true : false