-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create s3.tf #1
base: main
Are you sure you want to change the base?
Create s3.tf #1
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| provider "aws" { | ||
| region = "us-west-2" | ||
| } | ||
|
|
||
| resource "aws_s3_bucket" "dev_s3" { | ||
| bucket_prefix = "dev-" | ||
|
|
||
| tags = { | ||
| Environment = "Dev" | ||
| } | ||
| } | ||
|
Comment on lines
+5
to
+11
Check failure Code scanning / checkov Ensure that S3 bucket has a Public Access block Error
Ensure that S3 bucket has a Public Access block
Comment on lines
+5
to
+11
Check failure Code scanning / checkov Ensure the S3 bucket has access logging enabled Error
Ensure the S3 bucket has access logging enabled
Comment on lines
+5
to
+11
Check failure Code scanning / checkov Ensure all data stored in the S3 bucket have versioning enabled Error
Ensure all data stored in the S3 bucket have versioning enabled
Comment on lines
+5
to
+11
Check failure Code scanning / checkov Ensure that S3 bucket has cross-region replication enabled Error
Ensure that S3 bucket has cross-region replication enabled
Comment on lines
+5
to
+11
Check failure Code scanning / checkov Ensure that S3 buckets are encrypted with KMS by default Error
Ensure that S3 buckets are encrypted with KMS by default
Comment on lines
+5
to
+11
Check failure Code scanning / checkov Ensure that an S3 bucket has a lifecycle configuration Error
Ensure that an S3 bucket has a lifecycle configuration
|
||
|
|
||
| resource "aws_s3_bucket_ownership_controls" "dev_s3" { | ||
| bucket = aws_s3_bucket.dev_s3.id | ||
| rule { | ||
| object_ownership = "BucketOwnerPreferred" | ||
| } | ||
| } | ||
|
Comment on lines
+13
to
+18
Check failure Code scanning / checkov Ensure access control lists for S3 buckets are disabled Error
Ensure access control lists for S3 buckets are disabled
|
||
Check failure
Code scanning / checkov
Ensure S3 buckets should have event notifications enabled Error