Merge pull request #1 from pagopa/block-s3-public-access-block

Force all restrictions for public access to S3
pagopa · Jun 23, 2022 · 1a6f1ff · 1a6f1ff
2 parents 3748d9e + 1bd3750
commit 1a6f1ff
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/init/main.tf b/src/init/main.tf
@@ -40,6 +40,14 @@ resource "aws_s3_bucket_acl" "terraform_states" {
   acl    = "private"
 }
 
+resource "aws_s3_bucket_public_access_block" "terraform_states" {
+  bucket                  = aws_s3_bucket.terraform_states.id
+  block_public_acls       = true
+  block_public_policy     = true
+  ignore_public_acls      = true
+  restrict_public_buckets = true
+}
+
 resource "aws_s3_bucket_versioning" "terraform_states" {
   bucket = aws_s3_bucket.terraform_states.id
   versioning_configuration {