module "aes256_encrypted_bucket" {
  source = "../../../../../../terraform-s3-fork/modules/s3_bucket"

  env                = var.environment
  bucket_name        = "${var.service_name}-bucket-encrypted-with-aes256"
  application_family = var.application_family

  apply_server_side_encryption_by_default = {
    sse_algorithm = "AES256"
  }
}

module "kms_encrypted_bucket" {
  source = "../../../../../../terraform-s3-fork/modules/s3_bucket"

  env                = var.environment
  bucket_name        = "${var.service_name}-bucket-encrypted-with-kms"
  application_family = var.application_family

  kms_key_enabled = true
  apply_server_side_encryption_by_default = {
    sse_algorithm = "aws:kms"
  }
}