fix(misconf): change default ACL of digitalocean_spaces_bucket to pri…

…vate (#7577) Signed-off-by: nikpivkin <[email protected]>
aquasecurity · Oct 17, 2024 · 077dc8b · 077dc8b
1 parent abd307b
commit 077dc8b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/pkg/iac/adapters/terraform/digitalocean/spaces/adapt.go b/pkg/iac/adapters/terraform/digitalocean/spaces/adapt.go
@@ -24,7 +24,7 @@ func adaptBuckets(modules terraform.Modules) []spaces.Bucket {
  Metadata: block.GetMetadata(),
  Name: block.GetAttribute("name").AsStringValueOrDefault("", block),
  Objects: nil,
- ACL: block.GetAttribute("acl").AsStringValueOrDefault("public-read", block),
+ ACL: block.GetAttribute("acl").AsStringValueOrDefault("private", block),
  ForceDestroy: block.GetAttribute("force_destroy").AsBoolValueOrDefault(false, block),
  Versioning: spaces.Versioning{
  Metadata: block.GetMetadata(),

diff --git a/pkg/iac/adapters/terraform/digitalocean/spaces/adapt_test.go b/pkg/iac/adapters/terraform/digitalocean/spaces/adapt_test.go
@@ -69,7 +69,7 @@ func Test_adaptBuckets(t *testing.T) {
  Metadata: iacTypes.NewTestMetadata(),
  Name: iacTypes.String("", iacTypes.NewTestMetadata()),
  Objects: nil,
- ACL: iacTypes.String("public-read", iacTypes.NewTestMetadata()),
+ ACL: iacTypes.String("private", iacTypes.NewTestMetadata()),
  ForceDestroy: iacTypes.Bool(false, iacTypes.NewTestMetadata()),
  Versioning: spaces.Versioning{
  Metadata: iacTypes.NewTestMetadata(),