module "amp-asset-repo-vid-0014-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0014-p-use1" versioning = { enabled = true } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { sse_algorithm = "AES256" } bucket_key_enabled = false # TODO: Fetch this value if it varies and is important for your setup } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false # Ensure these variables are defined in your Terraform project, # or replace with hardcoded boolean values as needed. # block_public_acls = var.block_public_acls # ignore_public_acls = var.ignore_public_acls # restrict_public_buckets = var.restrict_public_buckets # block_public_policy = var.block_public_policy # force_destroy = var.force_destroy # Typically false for imported buckets block_public_acls = true ignore_public_acls = true restrict_public_buckets = true block_public_policy = true force_destroy = false attach_policy = true policy = data.aws_iam_policy_document.amp-asset-repo-vid-0014-p-use1_policy_doc.json # attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy # attach_require_latest_tls_policy = var.attach_require_latest_tls_policy # attach_deny_insecure_transport_policy = true # attach_require_latest_tls_policy = true tags = { "map-migrated" = "d-server-00jv2rbku5vpq0", "Data-Classification" = "Internal Use Only", "Owner" = "Nathaniel Lovett", "Project-Code" = "SME-AMP", "Project-Name" = "AMP", "Classification" = "internal-use-only", "Environment" = "Prod", "Purpose" = "APP-SUPPORT", "Business-Unit" = "SME-AMP", "Name" = "amp-asset-repo-vid-0014-p-use1", "aws-migration-project-id" = "MPE22602" } } module "amp-asset-repo-vid-0014-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0014-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { sse_algorithm = "AES256" } bucket_key_enabled = false } } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false # block_public_acls = var.block_public_acls # ignore_public_acls = var.ignore_public_acls # restrict_public_buckets = var.restrict_public_buckets # block_public_policy = var.block_public_policy # force_destroy = var.force_destroy block_public_acls = true ignore_public_acls = true restrict_public_buckets = true block_public_policy = true force_destroy = false attach_policy = true policy = data.aws_iam_policy_document.amp-asset-repo-vid-0014-p_policy_doc.json # attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy # attach_require_latest_tls_policy = var.attach_require_latest_tls_policy # Example values: # attach_deny_insecure_transport_policy = true # attach_require_latest_tls_policy = true tags = { "map-migrated" = "d-server-00jv2rbku5vpq0", "Data-Classification" = "Internal Use Only", "Owner" = "Nathaniel Lovett", "Project-Code" = "SME-AMP", "Project-Name" = "AMP", "Classification" = "internal-use-only", "Environment" = "Prod", "Purpose" = "APP-SUPPORT", "Business-Unit" = "SME-AMP", "Name" = "amp-asset-repo-vid-0014-p", "aws-migration-project-id" = "MPE22602" } } module "amp-archive-export-request-payloads-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-archive-export-request-payloads-prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-archive-export-request-payloads-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "confidential", Environment = "Prod", Name = "amp-archive-export-request-payloads-prod", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True" } } module "amp-archive-exports-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-archive-exports-prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-archive-exports-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "confidential", Environment = "Prod", Name = "amp-archive-exports-prod", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True" } } module "amp-archives-uslatin" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-archives-uslatin" versioning = { enabled = false } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = "arn:aws:kms:us-east-1:554998489284:key/2830a2f6-bb7c-42f9-958f-c2e6be5fdda4" sse_algorithm = "aws:kms" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-archives-uslatin.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-archives-uslatin", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0", Terraform = "True" } } module "amp-asset-repo-amb-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-amb-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-amb-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-amb-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True" } } module "amp-asset-catalog-transfer" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-catalog-transfer" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = false #policy = data.aws_iam_policy_document.amp-asset-catalog-transfer.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-catalog-transfer", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True" } } module "amp-asset-repo-amb-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-amb-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-amb-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-amb-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True" } } module "amp-asset-repo-aud-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-aud-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-aud-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-aud-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-aud-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-aud-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-aud-0002-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0002-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-aud-0002-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-aud-0002-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-aud-0002-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0002-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-aud-0002-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-aud-0002-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-aud-0003-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0003-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-aud-0003-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-aud-0003-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-aud-0003-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0003-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-aud-0003-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-aud-0003-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-aud-0004-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0004-p" providers = { aws = aws.eu-central-1 } versioning = { enabled = true } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-aud-0004-p.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy lifecycle_rule = [ { enabled = true id = "version cleanup" noncurrent_version_expiration = { days = 3 } noncurrent_version_transition = [] filter = { tags = {} } transition = [] }, { enabled = true id = "30D-Standard-IA" noncurrent_version_expiration = [] noncurrent_version_transition = [] filter = { tags = {} } transition = [ { days = 30 storage_class = "STANDARD_IA" } ] }, { enabled = true id = "amp_access_tier_12m_to_gir" noncurrent_version_expiration = [] noncurrent_version_transition = [] filter = { tags = { amp_access_tier = "12m" } } transition = [ { days = 0 storage_class = "GLACIER_IR" } ] } ] replication_configuration = { role = "arn:aws:iam::554998489284:role/amp-prod-s3-replicator" rules = [ { id = "amp-asset-repo-aud-0004-p-replication" status = true priority = 0 delete_marker_replication = false destination = { bucket = "arn:aws:s3:::amp-asset-repo-aud-0004-p-use1" replica_kms_key_id = "arn:aws:kms:us-east-1:554998489284:key/2830a2f6-bb7c-42f9-958f-c2e6be5fdda4" storage_class = "GLACIER" } filter = { tags = { replication-ready = "true" } } source_selection_criteria = { sse_kms_encrypted_objects = { enabled = true } } } ] } inventory_configuration = { "CSV" = { enabled = true included_object_versions = "Current" optional_fields = [ "Size", "LastModifiedDate", "ReplicationStatus", "StorageClass", "IntelligentTieringAccessTier", "ETag", ] frequency = "Daily" destination = { bucket_arn = module.sme-amp-prod-euc1-s3-inventory.s3_bucket_arn account_id = "554998489284" format = "CSV" prefix = "Inventory_Reports" } }, "Inventory" = { enabled = true included_object_versions = "Current" optional_fields = [ "Size", "LastModifiedDate", "IsMultipartUploaded", "ReplicationStatus", "EncryptionStatus", "StorageClass", "IntelligentTieringAccessTier", "ObjectLockMode", "ObjectLockRetainUntilDate", "ObjectLockLegalHoldStatus", ] frequency = "Daily" destination = { bucket_arn = module.sme-amp-prod-euc1-s3-inventory.s3_bucket_arn account_id = "554998489284" format = "Parquet" prefix = "Inventory_Reports" } } } tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-aud-0004-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-aud-0004-p-notifications" { source = "terraform-aws-modules/s3-bucket/aws//modules/notification" version = "~> 3.11.0" providers = { aws = aws.eu-central-1 } bucket = module.amp-asset-repo-aud-0004-p.s3_bucket_id sqs_notifications = { s3events = { queue_arn = "arn:aws:sqs:eu-central-1:554998489284:amp-service-s3events-prod" events = ["s3:LifecycleTransition", "s3:IntelligentTiering"] } } create_sqs_policy = false } module "amp-asset-repo-aud-0004-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-aud-0004-p-use1" versioning = { enabled = true } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-asset-repo-aud-0004-p-use1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-asset-repo-aud-0004-p-use1" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-digb-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-digb-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-elb-logs-eu-central-1" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-digb-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-digb-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-digb-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-digb-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-digb-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-digb-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-doc-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-doc-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-doc-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-doc-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-doc-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-doc-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-doc-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-doc-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-doc-0002-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-doc-0002-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-doc-0002-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-doc-0002-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-doc-0002-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-doc-0002-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-doc-0002-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-doc-0002-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-dod-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-dod-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-dod-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-dod-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-dod-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-dod-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-dod-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-dod-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-gra-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-gra-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-gra-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-gra-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-gra-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-gra-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-gra-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-gra-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-gra-0002-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-gra-0002-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-gra-0002-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-gra-0002-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-gra-0002-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-gra-0002-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-gra-0002-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod" Name = "amp-asset-repo-gra-0002-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-lfv-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-lfv-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-lfv-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-lfv-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-lfv-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-lfv-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-lfv-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-lfv-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-logs", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True" } } module "amp-asset-repo-packg-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-packg-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-elb-logs-eu-central-1" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-packg-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-packg-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-packg-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-packg-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-packg-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-packg-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0001-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0001-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-vid-0001-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0001-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-vid-0001-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0002-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0002-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0002-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-vid-0002-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0002-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0002-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0002-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0002-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0003-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0003-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0003-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-vid-0003-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0003-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0003-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0003-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-vid-0003-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0004-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0004-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0004-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-vid-0004-p", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0004-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0004-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0004-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "amp-asset-repo-vid-0004-p-use1", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True", aws-migration-project-id = "MPE22602", map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0005-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0005-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0005-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0005-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0005-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0005-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0005-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0005-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0006-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0006-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0006-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0006-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0006-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0006-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0006-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0006-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0007-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0007-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "amp-asset-repo-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0007-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0007-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0007-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0007-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0007-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0007-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0008-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0008-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0008-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0008-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0008-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0008-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0008-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0008-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0009-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0009-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0009-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0009-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0009-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0009-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0009-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0009-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0010-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0010-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0010-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0010-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0010-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0010-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0010-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0010-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0011-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0011-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0011-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0011-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0011-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0011-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0011-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0011-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0012-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0012-p" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0012-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0012-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-repo-vid-0012-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0012-p-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0012-p-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-repo-vid-0012-p-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "amp-asset-service-lambda-code-source-prod-eu" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-service-lambda-code-source-prod-eu" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-service-lambda-code-source-prod-eu.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-service-lambda-code-source-prod-eu" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-asset-transfer-sqs-payloads-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-transfer-sqs-payloads-prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-transfer-sqs-payloads-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-asset-transfer-sqs-payloads-prod" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-asset-usr-amino-export-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-usr-amino-export-p" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-usr-amino-export-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-usr-amino-export-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-asset-usr-aoma-core-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-usr-aoma-core-p" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-usr-aoma-core-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-usr-aoma-core-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-asset-usr-processor-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-usr-processor-p" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-usr-processor-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy cors_rule = [ { allowed_methods = ["GET", "PUT", "POST"] allowed_origins = ["https://aoma.smcdp-de.net"] allowed_headers = ["*"] expose_headers = ["ETag", "Location"] max_age_seconds = 0 } ] tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-usr-processor-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-asset-usr-ust-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-usr-ust-p" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-usr-ust-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy cors_rule = [ { allowed_methods = ["GET", "PUT", "POST"] allowed_origins = ["https://aoma.smcdp-de.net"] allowed_headers = ["*"] expose_headers = ["ETag", "Location"] max_age_seconds = 0 } ] tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-usr-ust-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-audio-archives-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-audio-archives-prod" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-audio-archives-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-audio-archives-prod" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-audio-archives-prod-eu" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-audio-archives-prod-eu" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-audio-archives-prod-eu.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-audio-archives-prod-eu" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-mediaconvert-output-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-mediaconvert-output-prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-mediaconvert-output-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-mediaconvert-output-prod" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-p2-vpc-flow-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-p2-vpc-flow-logs" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-p2-vpc-flow-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-p2-vpc-flow-logs" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-photo-archives-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-photo-archives-prod" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-photo-archives-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-photo-archives-prod" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-photo-archives-prod-eu" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-photo-archives-prod-eu" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-photo-archives-prod-eu.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-photo-archives-prod-eu" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-prod-athena-queries" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-prod-athena-queries" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-prod-athena-queries.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "amp-prod-athena-queries" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-prod-vpc-flow-logs-eu" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-prod-vpc-flow-logs-eu" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-prod-vpc-flow-logs-eu.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "amp-prod-vpc-flow-logs-eu" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-transcribe-response-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-transcribe-response-prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-transcribe-response-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-transcribe-response-prod" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-video-archives-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-video-archives-prod" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-video-archives-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-video-archives-prod" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-video-archives-prod-eu" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-video-archives-prod-eu" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-video-archives-prod-eu.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "amp-video-archives-prod-eu" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "ampp-da-s3-exports-test" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "ampp-da-s3-exports-test" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.ampp-da-s3-exports-test.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "ampp-da-s3-exports-test" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "ampp-os-manualsnapshots" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "ampp-os-manualsnapshots" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.ampp-os-manualsnapshots.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "ampp-os-manualsnapshots" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "aws-athena-query-results-554998489284-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-554998489284-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-athena-query-results-554998489284-us-east-1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "aws-athena-query-results-554998489284-us-east-1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "batch-operations-temp-euc1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "batch-operations-temp-euc1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.batch-operations-temp-euc1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "batch-operations-temp-euc1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "batch-operations-temp-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "batch-operations-temp-use1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.batch-operations-temp-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "batch-operations-temp-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "cf-templates-o195cp1madaz-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "cf-templates-o195cp1madaz-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.cf-templates-o195cp1madaz-us-east-1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "cf-templates-o195cp1madaz-us-east-1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "isilon-migration" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "isilon-migration" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.isilon-migration.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "isilon-migration" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "metadata-extract-request-sqs-payloads-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "metadata-extract-request-sqs-payloads-prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.metadata-extract-request-sqs-payloads-prod.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "confidential" Environment = "Prod" Name = "metadata-extract-request-sqs-payloads-prod" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-aas-p2-vpc-flowlogs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-aas-p2-vpc-flowlogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-aas-p2-vpc-flowlogs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-aas-p2-vpc-flowlogs" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-digarch-p-vpc-flowlogs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-digarch-p-vpc-flowlogs" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-digarch-p-vpc-flowlogs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-digarch-p-vpc-flowlogs" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-assets-db-archive" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-assets-db-archive" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-assets-db-archive.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-assets-db-archive" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-awsconfig" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-awsconfig" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-awsconfig.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-awsconfig" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-db-team-lambda" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-db-team-lambda" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-db-team-lambda.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP", Purpose = "APP-SUPPORT", Classification = "internal-use-only", Environment = "Prod", Name = "sme-amp-prod-db-team-lambda", Owner = "Nathaniel Lovett", Project-Code = "SME-AMP", Project-Name = "AMP", Terraform = "True" } } module "sme-amp-prod-elb-logs-eu-central-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-elb-logs-eu-central-1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-elb-logs-eu-central-1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-elb-logs-eu-central-1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-eu-central-1-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-eu-central-1-logs" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-eu-central-1-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-eu-central-1-logs" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-euc1-s3-inventory" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-euc1-s3-inventory" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-euc1-s3-inventory.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-euc1-s3-inventory" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-rds-backups" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-rds-backups" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-rds-backups.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "LOGGING" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-rds-backups" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-rds-backups-nv" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-rds-backups-nv" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-rds-backups-nv.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-rds-backups-nv" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-ssm-out" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-ssm-out" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-ssm-out.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-ssm-out" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-storage-class-analysis-logs-euc1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-storage-class-analysis-logs-euc1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-storage-class-analysis-logs-euc1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-storage-class-analysis-logs-euc1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-storage-class-analysis-logs-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-storage-class-analysis-logs-use1" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-storage-class-analysis-logs-use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-storage-class-analysis-logs-use1" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-terraform-state-files" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-terraform-state-files" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-terraform-state-files.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-terraform-state-files" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-us-east-1-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-us-east-1-logs" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-us-east-1-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-us-east-1-logs" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-use1-alb-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-use1-alb-logs" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-use1-alb-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-use1-alb-logs" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "sme-amp-prod-use1-s3-inventory" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-use1-s3-inventory" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-use1-s3-inventory.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "CLOUDOPS" Classification = "internal-use-only" Environment = "Prod" Name = "sme-amp-prod-use1-s3-inventory" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "celinedion-iamceline" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "celinedion-iamceline" versioning = { enabled = false } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = "arn:aws:kms:us-east-1:554998489284:key/2830a2f6-bb7c-42f9-958f-c2e6be5fdda4" sse_algorithm = "aws:kms" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.celinedion-iamceline.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "LOGGING" Classification = "internal-use-only" Environment = "Prod" Name = "celinedion-iamceline" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" } } module "sme-ust-ci-transfer" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-ust-ci-transfer" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } lifecycle_rule = [ { id = "DeleteObjects" enabled = true expiration = { days = 14 } } ] server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-ust-ci-transfer.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "sme-ust-ci-transfer" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-archives-cmg" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-archives-cmg" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-archives-cmg.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-archives-cmg" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp-asset-usr-smej-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-usr-smej-p" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-usr-smej-p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy cors_rule = [ { allowed_methods = ["GET", "PUT", "POST"] allowed_origins = ["https://aoma.smcdp-de.net"] allowed_headers = ["*"] expose_headers = ["ETag", "Location"] max_age_seconds = 0 } ] tags = { Business-Unit = "SME-AMP" Purpose = "APP-SUPPORT" Classification = "internal-use-only" Environment = "Prod" Name = "amp-asset-usr-smej-p" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" } } module "amp_asset_repo_dvdddp_0001_p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-dvdddp-0001-p" providers = { aws = aws.eu-central-1 } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp_asset_repo_dvdddp_0001_p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-dvdddp-0001-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp_asset_repo_lfv_0002_p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-lfv-0002-p" providers = { aws = aws.eu-central-1 } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp_asset_repo_lfv_0002_p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-lfv-0002-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Classification = "internal-use-only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" } } module "amp_asset_repo_vid_0013_p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0013-p" providers = { aws = aws.eu-central-1 } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp_asset_repo_vid_0013_p.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0013-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "aws_athena_query_result_ampp" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-result-ampp" providers = { aws = aws.eu-central-1 } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = { rule = { bucket_key_enabled = true apply_server_side_encryption_by_default = { sse_algorithm = "AES256" } } } object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws_athena_query_result_ampp.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "aws-athena-query-result-ampp" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Classification = "internal-use-only" Terraform = "True" Purpose = "APP-SUPPORT" } } module "amp_asset_repo_dvdddp_0001_p_use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-dvdddp-0001-p-use1" logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp_asset_repo_dvdddp_0001_p_use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-dvdddp-0001-p-use1" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp_asset_repo_lfv_0002_p_use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-lfv-0002-p-use1" logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp_asset_repo_lfv_0002_p_use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-lfv-0002-p-use1" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Classification = "internal-use-only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" } } module "amp_asset_repo_vid_0013_p_use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0013-p-use1" logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp_asset_repo_vid_0013_p_use1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0013-p-use1" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "sme_amp_prod_archive_import" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-archive-import" block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = { rule = { bucket_key_enabled = true apply_server_side_encryption_by_default = { sse_algorithm = "AES256" } } } object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme_amp_prod_archive_import.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "sme_amp_prod_archive_import" Owner = "Nathaniel Lovett" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "sme-amp-prod-elb-logs-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-elb-logs-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-amp-prod-elb-logs-us-east-1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "sme-amp-prod-elb-logs-us-east-1" Owner = "Nathaniel Lovett" Terraform = "True" Purpose = "LOGGING" Classification = "internal-use-only" } } module "sme-amp-prod-dw" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-dw" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "amp-prod-vpc-flow-logs-eu" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.sme-amp-prod-dw.json attach_public_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Purpose = "CLOUDOPS" } } module "amp-archive-columbiarecords" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-archive-columbiarecords" versioning = { enabled = false } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-archive-ColumbiaRecords.json attach_public_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-archive-columbiarecords" Owner = "Nathaniel Lovett" Terraform = "True" Purpose = "LOGGING" Classification = "internal-use-only" } } module "amp-archive-global-podcast" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-archive-global-podcast" versioning = { enabled = false } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-archive-global-podcast.json attach_public_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-archive-global-podcast" Owner = "Rohit Raj" Terraform = "True" Classification = "internal-use-only" } } module "amp-asset-repo-vid-0015-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0015-p" providers = { aws = aws.eu-central-1 } versioning = { enabled = true } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0015-p.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0015-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-vid-0015-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0015-p-use1" versioning = { enabled = true } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-asset-repo-vid-0015-p-use1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0015-p-use1" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-vid-0016-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0016-p" providers = { aws = aws.eu-central-1 } versioning = { enabled = true } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0016-p.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0016-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-vid-0016-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0016-p-use1" versioning = { enabled = true } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-asset-repo-vid-0016-p-use1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0016-p-use1" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-vid-0018-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0018-p" providers = { aws = aws.eu-central-1 } versioning = { enabled = true } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-vid-0018-p.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy lifecycle_rule = [ { enabled = true id = "version cleanup" noncurrent_version_expiration = { days = 3 } noncurrent_version_transition = [] filter = { tags = {} } transition = [] }, { enabled = true id = "30D-Standard-IA" noncurrent_version_expiration = [] noncurrent_version_transition = [] filter = { tags = {} } transition = [ { days = 30 storage_class = "STANDARD_IA" } ] }, { enabled = true id = "amp_access_tier_12m_to_gir" noncurrent_version_expiration = [] noncurrent_version_transition = [] filter = { tags = { amp_access_tier = "12m" } } transition = [ { days = 0 storage_class = "GLACIER_IR" } ] } ] replication_configuration = { role = "arn:aws:iam::554998489284:role/amp-prod-s3-replicator" rules = [ { id = "amp-asset-repo-vid-0018-p-replication" status = true priority = 0 delete_marker_replication = false destination = { bucket = "arn:aws:s3:::amp-asset-repo-vid-0018-p-use1" replica_kms_key_id = "arn:aws:kms:us-east-1:554998489284:key/2830a2f6-bb7c-42f9-958f-c2e6be5fdda4" storage_class = "GLACIER" } filter = { tags = { replication-ready = "true" } } source_selection_criteria = { sse_kms_encrypted_objects = { enabled = true } } } ] } inventory_configuration = { "CSV" = { enabled = true included_object_versions = "Current" optional_fields = [ "Size", "LastModifiedDate", "ReplicationStatus", "StorageClass", "IntelligentTieringAccessTier", "ETag", ] frequency = "Daily" destination = { bucket_arn = module.sme-amp-prod-euc1-s3-inventory.s3_bucket_arn account_id = "554998489284" format = "CSV" prefix = "Inventory_Reports" } }, "Inventory" = { enabled = true included_object_versions = "Current" optional_fields = [ "Size", "LastModifiedDate", "IsMultipartUploaded", "ReplicationStatus", "EncryptionStatus", "StorageClass", "IntelligentTieringAccessTier", "ObjectLockMode", "ObjectLockRetainUntilDate", "ObjectLockLegalHoldStatus", ] frequency = "Daily" destination = { bucket_arn = module.sme-amp-prod-euc1-s3-inventory.s3_bucket_arn account_id = "554998489284" format = "Parquet" prefix = "Inventory_Reports" } } } tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0018-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-vid-0018-p-notifications" { source = "terraform-aws-modules/s3-bucket/aws//modules/notification" version = "~> 3.11.0" providers = { aws = aws.eu-central-1 } bucket = module.amp-asset-repo-vid-0018-p.s3_bucket_id sqs_notifications = { s3events = { queue_arn = "arn:aws:sqs:eu-central-1:554998489284:amp-service-s3events-prod" events = ["s3:LifecycleTransition", "s3:IntelligentTiering"] } } create_sqs_policy = false } module "amp-asset-repo-vid-0018-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-vid-0018-p-use1" versioning = { enabled = true } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-asset-repo-vid-0018-p-use1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-asset-repo-vid-0018-p-use1" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-blueray-0001-p" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-blueray-0001-p" providers = { aws = aws.eu-central-1 } versioning = { enabled = true } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = var.attach_policy policy = data.aws_iam_policy_document.amp-asset-repo-blueray-0001-p.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy lifecycle_rule = [ { enabled = true id = "version cleanup" noncurrent_version_expiration = { days = 3 } noncurrent_version_transition = [] filter = { tags = {} } transition = [] }, { enabled = true id = "30D-Standard-IA" noncurrent_version_expiration = [] noncurrent_version_transition = [] filter = { tags = {} } transition = [ { days = 30 storage_class = "STANDARD_IA" } ] }, { enabled = true id = "amp_access_tier_12m_to_gir" noncurrent_version_expiration = [] noncurrent_version_transition = [] filter = { tags = { amp_access_tier = "12m" } } transition = [ { days = 0 storage_class = "GLACIER_IR" } ] } ] replication_configuration = { role = "arn:aws:iam::554998489284:role/amp-prod-s3-replicator" rules = [ { id = "amp-asset-repo-blueray-0001-p-replication" status = true priority = 0 delete_marker_replication = false destination = { bucket = "arn:aws:s3:::amp-asset-repo-blueray-0001-p-use1" replica_kms_key_id = "arn:aws:kms:us-east-1:554998489284:key/2830a2f6-bb7c-42f9-958f-c2e6be5fdda4" storage_class = "GLACIER" } filter = { tags = { replication-ready = "true" } } source_selection_criteria = { sse_kms_encrypted_objects = { enabled = true } } } ] } inventory_configuration = { "CSV" = { enabled = true included_object_versions = "Current" optional_fields = [ "Size", "LastModifiedDate", "ReplicationStatus", "StorageClass", "IntelligentTieringAccessTier", "ETag", ] frequency = "Daily" destination = { bucket_arn = module.sme-amp-prod-euc1-s3-inventory.s3_bucket_arn account_id = "554998489284" format = "CSV" prefix = "Inventory_Reports" } }, "Inventory" = { enabled = true included_object_versions = "Current" optional_fields = [ "Size", "LastModifiedDate", "IsMultipartUploaded", "ReplicationStatus", "EncryptionStatus", "StorageClass", "IntelligentTieringAccessTier", "ObjectLockMode", "ObjectLockRetainUntilDate", "ObjectLockLegalHoldStatus", ] frequency = "Daily" destination = { bucket_arn = module.sme-amp-prod-euc1-s3-inventory.s3_bucket_arn account_id = "554998489284" format = "Parquet" prefix = "Inventory_Reports" } } } tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "amp-asset-repo-blueray-0001-p" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Data-Classification = "Internal Use Only" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-asset-repo-blueray-0001-p-notifications" { source = "terraform-aws-modules/s3-bucket/aws//modules/notification" version = "~> 3.11.0" providers = { aws = aws.eu-central-1 } bucket = module.amp-asset-repo-blueray-0001-p.s3_bucket_id sqs_notifications = { s3events = { queue_arn = "arn:aws:sqs:eu-central-1:554998489284:amp-service-s3events-prod" events = ["s3:LifecycleTransition", "s3:IntelligentTiering"] } } create_sqs_policy = false } module "amp-asset-repo-blueray-0001-p-use1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-asset-repo-blueray-0001-p-use1" versioning = { enabled = true } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-asset-repo-blueray-0001-p-use1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-asset-repo-blueray-0001-p-use1" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "aws-athena-query-results-eu-central-1-554998489284" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-eu-central-1-554998489284" providers = { aws = aws.eu-central-1 } versioning = { enabled = false } logging = { target_bucket = "sme-amp-prod-eu-central-1-logs" target_prefix = "sme-amp-prod/" } block_public_acls = true block_public_policy = true ignore_public_acls = true restrict_public_buckets = true server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" #force_destroy = null attach_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Environment = "Prod" Name = "aws-athena-query-results-eu-central-1-554998489284" Owner = "Nathaniel Lovett" Project-Code = "SME-AMP" Project-Name = "AMP" Terraform = "True" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "aws-athena-query-results-us-east-1-554998489284" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-us-east-1-554998489284" versioning = { enabled = false } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "aws-athena-query-results-us-east-1-554998489284" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "sme-amp-prod-cs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-amp-prod-cs" versioning = { enabled = true } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.sme-amp-prod-cs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "sme-amp-prod-cs" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } } module "amp-archives-queen" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "amp-archives-queen" versioning = { enabled = true } server_side_encryption_configuration = { rule = { bucket_key_enabled = false apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } logging = { target_bucket = "sme-amp-prod-us-east-1-logs" target_prefix = "sme-amp-prod/" } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.amp-archives-queen.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "SME-AMP" Project-Code = "SME-AMP" Project-Name = "AMP" Environment = "Prod" Name = "amp-archives-queen" Owner = "Nathaniel Lovett" Terraform = "True" Data-Classification = "Internal Use Only" aws-migration-project-id = "MPE22602" map-migrated = "d-server-00jv2rbku5vpq0" Purpose = "APP-SUPPORT" Classification = "internal-use-only" } }