binaryalert
binaryalert copied to clipboard
Created S3 buckets should block public access
Background
It is a best practice to block public access to S3 buckets. The module currently creates a number of S3 buckets publicly.
Desired Change
Something akin to the below. Perhaps it should be enabled by default, where a variable is provided to disable it if need be.
resource "aws_s3_bucket_public_access_block" "block_binaryalert_bucket" {
bucket = BUCKET_IDs
restrict_public_buckets = true
block_public_acls = true
block_public_policy = true
ignore_public_acls = true
}