Skip to content

Latest commit

 

History

History
31 lines (21 loc) · 820 Bytes

README.md

File metadata and controls

31 lines (21 loc) · 820 Bytes

Terraform Module: s3-storage

Standarized set up for a private, encrypted S3 bucket with versioning. Used for any private files from an application, e.g. PDF files linked to a record.

Usage

module "s3-storage" {
  source = "github.com/dbl-works/terraform//s3-private?ref=v2021.11.13"

  # Required
  environment = "staging"
  project     = "someproject"
  bucket_name = "someproject-staging-storage"

  # Optional
  kms_deletion_window_in_days     = 30
  versioning                      = true
  primary_storage_class_retention = 0
}

Outputs

  • arn: you probably want to pass this arn to ECS grant_write_access_to_s3_arns
  • kms-key-arn: you probably want to pass this arn to ECS kms_key_arns
  • group-usage-name: name of the AWS IAM group to grant usage permissions to the bucket