-
-
Notifications
You must be signed in to change notification settings - Fork 100
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Refactor to use s3-bucket module, update in general #66
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Change details
-
Error ID Change Path Resource BC_VUL_2 Added /test/src/go.sum undefined
/test all |
/test all |
/test all |
|
||
required_providers { | ||
aws = { | ||
source = "hashicorp/aws" | ||
version = ">= 3.0" | ||
version = ">= 3.0, < 4.0" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't understand. I thought we weren't going to pin provider versions to major releases.
Also, this is more concise, no ?
version = ">= 3.0, < 4.0" | |
version = "~> 3.0" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh ok, so 2 separate releases interesting.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is a temporary change to provide a stepping stone to the next version, where the version will be pinned at >= 4.2
.
} | ||
|
||
data "aws_caller_identity" "current" {} | ||
data "aws_caller_identity" "current" { count = local.enabled ? 1 : 0 } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
data "aws_caller_identity" "current" { count = local.enabled ? 1 : 0 } | |
data "aws_caller_identity" "current" { | |
count = local.enabled ? 1 : 0 | |
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like 1-liners for trivial stuff like this, and terraform fmt
approves.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM but some nitpicks
default = 30 | ||
description = "Specifies when noncurrent object versions transitions" | ||
default = 90 | ||
description = "Specifies when non-current object versions expire" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nit
description = "Specifies when non-current object versions expire" | |
description = "Specifies when non-current object versions expire (in days)" |
variable "noncurrent_version_transition_days" { | ||
type = number | ||
default = 30 | ||
description = "Specifies when noncurrent object versions transition to Glacier Flexible Retrieval" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nit
description = "Specifies when noncurrent object versions transition to Glacier Flexible Retrieval" | |
description = "Specifies when noncurrent object versions transition to Glacier Flexible Retrieval (in days)" |
what
mfa_delete
< 4.0
and disable Renovate bot, closes Prevent using AWS provider v4 due to breaking changes in s3_bucket resources #64why
mfa_delete
enabled requires entering an MFA token for every Terraform operation, which is incompatible with automation. Users requiringmfa_delete
should either not use Terraform or create their own fork.notes
This is the first of 2 upgrade releases to get this module to support Terraform AWS Provider v4. We are breaking it into 2 releases so that users have the option of upgrading step-by-step rather than all at once. Upgrade instructions are here.