Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add "deny incorrect kms key sse" bucket policy #240

Merged
merged 2 commits into from Jun 19, 2023
Merged

feat: Add "deny incorrect kms key sse" bucket policy #240

merged 2 commits into from Jun 19, 2023

Conversation

remiflament
Copy link
Contributor

Description

Add the possibility to specify a KMS key to use as requirement for uploading files.

Motivation and Context

See this issue #239

Breaking Changes

No

How Has This Been Tested?

  • I have updated at least one of the examples/* to demonstrate and validate my change(s)
  • I have tested and validated these changes using one or more of the provided examples/* projects
  • I have executed pre-commit run -a on my pull request
  • I have tried to upload a file without specifying the right key and got denied. Only the specified key allowed me to upload files to the bucket.

Copy link
Member

@antonbabenko antonbabenko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor comments about naming and text

variables.tf Outdated Show resolved Hide resolved
variables.tf Outdated Show resolved Hide resolved
variables.tf Outdated Show resolved Hide resolved
main.tf Show resolved Hide resolved
@remiflament
Copy link
Contributor Author

Hello @antonbabenko thanks for the feedback. I fixed the typos and text. For the "principals{}" it is mandatory you get an error when we remove them. Please could you re-check this PR?

@antonbabenko antonbabenko merged commit e0d5788 into terraform-aws-modules:master Jun 19, 2023
15 checks passed
antonbabenko pushed a commit that referenced this pull request Jun 19, 2023
## [3.14.0](v3.13.0...v3.14.0) (2023-06-19)

### Features

* Add "deny incorrect kms key sse" bucket policy ([#240](#240)) ([e0d5788](e0d5788))
@antonbabenko
Copy link
Member

This PR is included in version 3.14.0 🎉

@github-actions
Copy link

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jul 20, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants