feat: Add kms_encryption variable to cloudfront logs bucket (#570)

chanzuckerberg · Mar 22, 2024 · eea7209 · eea7209
1 parent f4174df
commit eea7209
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/aws-cloudfront-logs-bucket/main.tf b/aws-cloudfront-logs-bucket/main.tf
@@ -12,6 +12,7 @@ module "aws-cloudfront-logs-bucket" {
   abort_incomplete_multipart_upload_days = var.abort_incomplete_multipart_upload_days
   public_access_block                    = var.public_access_block
   lifecycle_rules                        = var.lifecycle_rules
+  kms_encryption                         = var.kms_encryption
 }
 
 resource "aws_s3_bucket_ownership_controls" "cloudfront-owner-preferred" {

diff --git a/aws-cloudfront-logs-bucket/variables.tf b/aws-cloudfront-logs-bucket/variables.tf
@@ -62,3 +62,8 @@ variable "public_access_block" {
   type    = bool
   default = true
 }
+
+variable "kms_encryption" {
+  type = bool
+  default = false
+}