module "cf-templates-d2uimad4i1is-eu-central-1" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "cf-templates-d2uimad4i1is-eu-central-1"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.cf-templates-d2uimad4i1is-eu-central-1.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "cf-templates-d2uimad4i1is-eu-central-1"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Classification = "internal-use-only"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "gdsd-audio-salad-uat-assets" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "gdsd-audio-salad-uat-assets"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.gdsd-audio-salad-uat-assets.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "gdsd-audio-salad-uat-assets"
    Classification = "secret"
    Environment    = "UAT"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "APP-SUPPORT"
  }
}


module "gdsd-fuga-uat-assets" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "gdsd-fuga-uat-assets"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.gdsd-fuga-uat-assets.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "gdsd-fuga-uat-assets"
    Classification = "secret"
    Environment    = "UAT"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "APP-SUPPORT"
  }

}

module "gdsd-msk-dev-evnts" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "gdsd-msk-dev-evnts"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.gdsd-msk-dev-evnts.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "gdsd-msk-dev-evnts"
    Classification = "secret"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "sme-global-ds-dev-awsconfig" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-global-ds-dev-awsconfig"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-global-ds-dev-awsconfig.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "sme-global-ds-dev-awsconfig"
    Classification = "secret"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "sme-global-ds-dev-cf-euc1-logs" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-global-ds-dev-cf-euc1-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-global-ds-dev-cf-euc1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "sme-global-ds-dev-cf-euc1-logs"
    Classification = "internal-use-only"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}


module "sme-global-ds-dev-elb-euc1-logs" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-global-ds-dev-elb-euc1-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-global-ds-dev-elb-euc1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "sme-global-ds-dev-elb-euc1-logs"
    Classification = "internal-use-only"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "sme-global-ds-dev-exddex-dev-assets" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-global-ds-dev-exddex-dev-assets"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-global-ds-dev-exddex-dev-assets.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "sme-global-ds-dev-exddex-dev-assets"
    Classification = "secret"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "sme-global-ds-dev-exddex-uat-assets" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-global-ds-dev-exddex-uat-assets"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-global-ds-dev-exddex-uat-assets.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "sme-global-ds-dev-exddex-uat-assets"
    Classification = "secret"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "gdsd-supraphon-uat-assets" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "gdsd-supraphon-uat-assets"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.gdsd-supraphon-uat-assets.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "gdsd-supraphon-uat-assets"
    Classification = "secret"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "sme-global-ds-dev-s3-euc1-logs" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-global-ds-dev-s3-euc1-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-global-ds-dev-s3-euc1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "sme-global-ds-dev-s3-euc1-logs"
    Classification = "internal-use-only"
    Environment    = "Dev"
    Business-Unit  = "Global-DS"
    Terraform      = "True"
    Project-Name   = "Global-DS-MSK"
    Project-Code   = "SME-GLOBAL-DS"
    Owner          = "Dave Wenger"
    Purpose        = "CLOUDOPS"
  }
}

module "sme-global-ds-gds-s1" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-global-ds-gds-s1"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-global-ds-gds-s1.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "sme-global-ds-gds-s1"
    Business-unit  = "Global-DS"
    Environment    = "UAT"
    Owner          = "Dave Wenger"
    Project-Code   = "SME-GLOBAL-DS"
    Project-Name   = "Global-DS-MSK"
    Classification = "secret"
    Purpose        = "CLOUDOPS"
  }
}

module "gdsd-ddex-general-uat" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "gdsd-ddex-general-uat"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.gdsd-ddex-general-uat.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name        = "gdsd-ddex-general-uat"
    Environment = "dev"
    Owner       = "GDS"
  }
}

module "gdsd-bytedance-uat-assets" {
  #checkov:skip=CKV_AWS_300: lifecycle rule does not require expiration
  #checkov:skip=CKV_AWS_19: S3 bucket encryption managed externally
  #checkov:skip=CKV_AWS_21: versioning not required for this bucket
  #checkov:skip=CKV_AWS_145: KMS encryption not required
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "gdsd-bytedance-uat-assets"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-global-ds-dev-s3-euc1-logs"
    target_prefix = "sme-global-ds-dev"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "gdsd-bytedance-uat-assets"
    Business-unit  = "Global-DS"
    Environment    = "UAT"
    Owner          = "Dave Wenger"
    Project-Code   = "SME-GLOBAL-DS"
    Project-Name   = "Global-DS-MSK"
    Classification = "secret"
    Purpose        = "CLOUDOPS"
  }
}