diff --git a/tf/step2_cf-only/s3.tf b/tf/step2_cf-only/s3.tf
index a14bc36..bdee5a1 100644
--- a/tf/step2_cf-only/s3.tf
+++ b/tf/step2_cf-only/s3.tf
@@ -64,11 +64,21 @@ resource "aws_s3_bucket" "log_bucket" {
   bucket = "tf-log-bucket"
 }
 
+# Add ACL
 resource "aws_s3_bucket_acl" "log_bucket_acl" {
   bucket = aws_s3_bucket.log_bucket.id
   acl    = "log-delivery-write"
 }
 
+# Add versioning
+resource "aws_s3_bucket_versioning" "log_bucket_versioning" {
+  bucket = aws_s3_bucket.log_bucket.id
+
+  versioning_configuration {
+    status = "Enabled"
+  }
+}
+
 # Add logging
 resource "aws_s3_bucket_logging" "s3log" {
   bucket = aws_s3_bucket.week1-bucket.id