[v13] enable acl in single aws terraform s3 (#25854)

* update single aws terraform s3 * terraform lint fix
gravitational · May 9, 2023 · 5b99990 · 5b99990
1 parent a32f28c
commit 5b99990
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/examples/aws/terraform/starter-cluster/s3.tf b/examples/aws/terraform/starter-cluster/s3.tf
@@ -13,8 +13,17 @@ resource "aws_s3_bucket" "storage" {
 }
 
 resource "aws_s3_bucket_acl" "storage" {
-  bucket = aws_s3_bucket.storage.bucket
-  acl    = "private"
+  depends_on = [aws_s3_bucket_ownership_controls.storage]
+  bucket     = aws_s3_bucket.storage.bucket
+  acl        = "private"
+}
+
+resource "aws_s3_bucket_ownership_controls" "storage" {
+  bucket = aws_s3_bucket.storage.id
+
+  rule {
+    object_ownership = "BucketOwnerPreferred"
+  }
 }
 
 // For demo purposes, CMK is not needed