add sse for rds export bucket

LBHackney-IT · Oct 16, 2023 · c6bd2a0 · c6bd2a0
1 parent b8647b6
commit c6bd2a0
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/terraform/core/10-aws-s3-buckets.tf b/terraform/core/10-aws-s3-buckets.tf
@@ -435,3 +435,14 @@ module "rds_export_storage" {
   bucket_name       = "RDS Export Storage"
   bucket_identifier = "rds-export-storage"
 }
+
+resource "aws_s3_bucket_server_side_encryption_configuration" "rds_export_storage_encryption" {
+  bucket = module.rds_export_storage.bucket_id
+
+  rule {
+    apply_server_side_encryption_by_default {
+      sse_algorithm = "aws:kms"
+    }
+    bucket_key_enabled = true
+  }
+}