add ownership controls

ministryofjustice · Nov 25, 2024 · cf9d0ff · cf9d0ff
1 parent cbd956f
commit cf9d0ff
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/organisation-security/terraform/s3.tf b/organisation-security/terraform/s3.tf
@@ -139,6 +139,7 @@ module "mp_ssm_inventory_resource_data_sync_s3" {
   bucket_name         = "mp-ssm-inventory-resource-data-sync-${random_integer.suffix.result}"
   custom_kms_key      = aws_kms_key.mp_ssm_inventory_resource_data_sync.arn
   replication_enabled = false
+  ownership_controls  = "BucketOwnerEnforced"
   lifecycle_rule = [
     {
       id      = "main"