From 938010112c4dfb911bdd9d7bcf5629a86915a642 Mon Sep 17 00:00:00 2001 From: caswalker <90857961+caswalker@users.noreply.github.com> Date: Mon, 14 Feb 2022 12:02:03 -0500 Subject: [PATCH] news3.tf adfds --- news3.tf | 143 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 143 insertions(+) create mode 100644 news3.tf diff --git a/news3.tf b/news3.tf new file mode 100644 index 0000000..c7fcb3b --- /dev/null +++ b/news3.tf @@ -0,0 +1,143 @@ +resource "aws_s3_bucket" "data" { + # bucket is public + # bucket is not encrypted + # bucket does not have access logs + # bucket does not have versioning + bucket = "${local.resource_prefix.value}-data" + acl = "public-read" + force_destroy = true + tags = merge({ + Name = "${local.resource_prefix.value}-data" + Environment = local.resource_prefix.value + }, { + git_commit = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0" + git_file = "terraform/aws/s3.tf" + git_last_modified_at = "2020-06-16 14:46:24" + git_last_modified_by = "nimrodkor@gmail.com" + git_modifiers = "nimrodkor" + git_org = "bridgecrewio" + git_repo = "terragoat" + yor_trace = "0874007d-903a-4b4c-945f-c9c233e13243" + }) +} + +resource "aws_s3_bucket_object" "data_object" { + bucket = aws_s3_bucket.data.id + key = "customer-master.xlsx" + source = "resources/customer-master.xlsx" + tags = merge({ + Name = "${local.resource_prefix.value}-customer-master" + Environment = local.resource_prefix.value + }, { + git_commit = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0" + git_file = "terraform/aws/s3.tf" + git_last_modified_at = "2020-06-16 14:46:24" + git_last_modified_by = "nimrodkor@gmail.com" + git_modifiers = "nimrodkor" + git_org = "bridgecrewio" + git_repo = "terragoat" + yor_trace = "a7f01cc7-63c2-41a8-8555-6665e5e39a64" + }) +} + +resource "aws_s3_bucket" "financials" { + # bucket is not encrypted + # bucket does not have access logs + # bucket does not have versioning + bucket = "${local.resource_prefix.value}-financials" + acl = "private" + force_destroy = true + tags = merge({ + Name = "${local.resource_prefix.value}-financials" + Environment = local.resource_prefix.value + }, { + git_commit = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0" + git_file = "terraform/aws/s3.tf" + git_last_modified_at = "2020-06-16 14:46:24" + git_last_modified_by = "nimrodkor@gmail.com" + git_modifiers = "nimrodkor" + git_org = "bridgecrewio" + git_repo = "terragoat" + yor_trace = "0e012640-b597-4e5d-9378-d4b584aea913" + }) + +} + +resource "aws_s3_bucket" "operations" { + # bucket is not encrypted + # bucket does not have access logs + bucket = "${local.resource_prefix.value}-operations" + acl = "private" + versioning { + enabled = true + } + force_destroy = true + tags = merge({ + Name = "${local.resource_prefix.value}-operations" + Environment = local.resource_prefix.value + }, { + git_commit = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0" + git_file = "terraform/aws/s3.tf" + git_last_modified_at = "2020-06-16 14:46:24" + git_last_modified_by = "nimrodkor@gmail.com" + git_modifiers = "nimrodkor" + git_org = "bridgecrewio" + git_repo = "terragoat" + yor_trace = "29efcf7b-22a8-4bd6-8e14-1f55b3a2d743" + }) + +} + +resource "aws_s3_bucket" "data_science" { + # bucket is not encrypted + bucket = "${local.resource_prefix.value}-data-science" + acl = "private" + versioning { + enabled = true + } + logging { + target_bucket = "${aws_s3_bucket.logs.id}" + target_prefix = "log/" + } + force_destroy = true + tags = { + git_commit = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0" + git_file = "terraform/aws/s3.tf" + git_last_modified_at = "2020-06-16 14:46:24" + git_last_modified_by = "nimrodkor@gmail.com" + git_modifiers = "nimrodkor" + git_org = "bridgecrewio" + git_repo = "terragoat" + yor_trace = "9a7c8788-5655-4708-bbc3-64ead9847f64" + } +} + +resource "aws_s3_bucket" "logs" { + bucket = "${local.resource_prefix.value}-logs" + acl = "log-delivery-write" + versioning { + enabled = true + } + server_side_encryption_configuration { + rule { + apply_server_side_encryption_by_default { + sse_algorithm = "aws:kms" + kms_master_key_id = "${aws_kms_key.logs_key.arn}" + } + } + } + force_destroy = true + tags = merge({ + Name = "${local.resource_prefix.value}-logs" + Environment = local.resource_prefix.value + }, { + git_commit = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0" + git_file = "terraform/aws/s3.tf" + git_last_modified_at = "2020-06-16 14:46:24" + git_last_modified_by = "nimrodkor@gmail.com" + git_modifiers = "nimrodkor" + git_org = "bridgecrewio" + git_repo = "terragoat" + yor_trace = "01946fe9-aae2-4c99-a975-e9b0d3a4696c" + }) +}