-
Notifications
You must be signed in to change notification settings - Fork 5
/
s3.tf
54 lines (48 loc) · 1.08 KB
/
s3.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
resource "aws_s3_bucket" "codepipeline" {
bucket = "${var.bucket_prefix}codepipeline-${var.www_domain}"
acl = "private"
}
resource "aws_s3_bucket" "www" {
bucket = "${var.bucket_prefix}${var.www_domain}"
acl = "public-read"
policy = <<POLICY
{
"Version":"2012-10-17",
"Statement":[
{
"Sid":"AddPerm",
"Effect":"Allow",
"Principal": "*",
"Action":["s3:GetObject"],
"Resource":["arn:aws:s3:::${var.bucket_prefix}${var.www_domain}/*"]
}
]
}
POLICY
// S3 understands what it means to host a website.
website {
index_document = "index.html"
error_document = "404.html"
}
}
resource "aws_s3_bucket" "non-www" {
bucket = "${var.bucket_prefix}${var.root_domain}"
acl = "public-read"
policy = <<POLICY
{
"Version":"2012-10-17",
"Statement":[
{
"Sid":"AddPerm",
"Effect":"Allow",
"Principal": "*",
"Action":["s3:GetObject"],
"Resource":["arn:aws:s3:::${var.bucket_prefix}${var.root_domain}/*"]
}
]
}
POLICY
website {
redirect_all_requests_to = "https://${var.www_domain}"
}
}