aws_s3_bucket.tf

// AWS CloudTrail S3 Bucket
data "template_file" "aws_s3_bucket_policy" {
  count = var.existing_cloudtrail != null ? 0 : 1 # Don't create this if using an existing cloudtrail

  template = file("${path.module}/aws_s3_bucket_policy.tpl")

  vars = {
    aws_account_id = var.aws_account_info.account_id
    s3_bucket_arn  = aws_s3_bucket.bucket[0].arn
  }
}

resource "aws_s3_bucket" "bucket" {
  count = var.existing_cloudtrail != null ? 0 : 1 # Don't create this if using an existing cloudtrail

  # This is to keep things consistent and prevent conflicts across
  # environments.
  bucket = var.aws_optional_conf.s3_bucket_name
  acl    = "private"

  versioning {
    enabled = "false"
  }
  force_destroy = var.aws_flags.s3_force_destroy

  tags          = var.aws_optional_conf.tags

  depends_on    = [aws_sns_topic_subscription.sqs]
}

resource "aws_s3_bucket_policy" "bucket" {
  count = var.existing_cloudtrail != null ? 0 : 1 # Don't create this if using an existing cloudtrail

  bucket = aws_s3_bucket.bucket[0].id
  policy = data.template_file.aws_s3_bucket_policy[0].rendered
}