module "aws-athena-query-results-eu-central-1-104858398257" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-eu-central-1-104858398257" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-athena-query-results-eu-central-1-104858398257.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { map-migrated = "migKNBMDMW06I" Classification = "internal-use-only" Environment = "Dev" Terraform = "True" Business-Unit = "AOMA-Conversion" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" purpose = "CLOUDOPS" } } module "cf-templates-1bbtpa7cl4smx-eu-central-1" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "cf-templates-1bbtpa7cl4smx-eu-central-1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.cf-templates-1bbtpa7cl4smx-eu-central-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "cf-templates-1bbtpa7cl4smx-eu-central-1" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "cf-templates-1bbtpa7cl4smx-us-east-1" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "cf-templates-1bbtpa7cl4smx-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-us-east-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.cf-templates-1bbtpa7cl4smx-us-east-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "cf-templates-1bbtpa7cl4smx-us-east-1" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "eksctl-mc-del-dev-cluster-vpc-flow-logs" { # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "eksctl-mc-del-dev-cluster-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.eksctl-mc-del-dev-cluster-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "eksctl-mc-del-dev-cluster-vpc-flow-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "mcon-ansible" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mcon-ansible" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mcon-ansible.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "mcon-ansible" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "mcon-del-audit-vpc-flow-logs" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mcon-del-audit-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mcon-del-audit-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "mcon-del-audit-vpc-flow-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "mcond-ff-elb-logs" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mcond-ff-elb-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mcond-ff-elb-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "mcond-ff-elb-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "LOGGING" } } module "mcond-telestream-cloud" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mcond-telestream-cloud" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-us-east-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mcond-telestream-cloud.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion" Environment = "Dev" Name = "mcond-telestream-cloud" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "APP-SUPPORT" } } module "mcond-va-msk-poc-vpc-flow-logs" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mcond-va-msk-poc-vpc-flow-logs" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-us-east-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mcond-va-msk-poc-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "mcond-va-msk-poc-vpc-flow-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "media-conversation-dev-vpc-flow-logs" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "media-conversation-dev-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.media-conversation-dev-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "media-conversation-dev-vpc-flow-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "media-conversion-del-dev-eks-vpc-flow-logs" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "media-conversion-del-dev-eks-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.media-conversion-del-dev-eks-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "media-conversion-del-dev-eks-vpc-flow-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "media-conversion-dev-vpc-flow-logs" { # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "media-conversion-dev-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.media-conversion-dev-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Owner = "Ted Gulesserian" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "media-conversion-stage-vpc-flow-logs" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "media-conversion-stage-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.media-conversion-stage-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "media-conversion-stage-vpc-flow-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-db-conversion-metadata" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-db-conversion-metadata" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-db-conversion-metadata.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-db-conversion-metadata" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-ecs-mc-test" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-ecs-mc-test" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-ecs-mc-test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-ecs-mc-test" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-ci-cd-test" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-ci-cd-test" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-ci-cd-test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-ci-cd-test" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-dev-hash" { # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-dev-hash" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-dev-hash.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-dev-hash" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-dev-source" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-dev-source" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = true block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-dev-source.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-dev-source" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-dev-target" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-dev-target" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-dev-target.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-dev-target" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-lambda" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-lambda" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-lambda.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-lambda" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-stage-hash" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-stage-hash" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-stage-hash.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-stage-hash" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-stage-source" { # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-stage-source" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = true block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-stage-source.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-stage-source" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-stage-target" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-stage-target" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-stage-target.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-mc-stage-target" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mcdel-s2-vpc-flowlogs" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mcdel-s2-vpc-flowlogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mcdel-s2-vpc-flowlogs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "Media Conversion" Environment = "STAGE2" Owner = "Sang Han" Project-code = "MCON" Project-name = "MCON-DEL" map-migrated = "migKNBMDMW06I" Classification = "internal-use-only" Purpose = "CLOUDOPS" } } module "sme-mcon-d2-vpc-flowlogs" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mcon-d2-vpc-flowlogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mcon-d2-vpc-flowlogs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "Media Conversion" Environment = "DEV2" Owner = "Mandar Padsalgikar" Project-code = "MCON" Project-name = "MCON-Delivery" map-migrated = "migKNBMDMW06I" Classification = "internal-use-only" Purpose = "CLOUDOPS" } } module "sme-media-conversion-archiving-data-test" { # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-archiving-data-test" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-archiving-data-test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-archiving-data-test" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-media-conversion-dev-athena-out" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-athena-out" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-athena-out.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-dev-athena-out" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-media-conversion-dev-awsconfig" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-awsconfig" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-awsconfig.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-dev-awsconfig" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-media-conversion-dev-eu-central-1-logs" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-eu-central-1-logs" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-eu-central-1-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-dev-eu-central-1-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" USE = "LOGGING" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Purpose = "LOGGING" } } module "sme-media-conversion-dev-euc1-s3-inventory" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-euc1-s3-inventory" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-euc1-s3-inventory.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-dev-euc1-s3-inventory" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-media-conversion-dev-rds-backups" { # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-rds-backups" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-rds-backups.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { map-migrated = "migKNBMDMW06I" Classification = "internal-use-only" Purpose = "CLOUDOPS" } } module "sme-media-conversion-dev-ssm-out" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-ssm-out" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-ssm-out.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-dev-ssm-out" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-media-conversion-dev-us-east-1-logs" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-us-east-1-logs" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-us-east-1-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-dev-us-east-1-logs" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" USE = "LOGGING" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "LOGGING" } } module "sme-media-conversion-dev-use1-s3-inventory" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-dev-use1-s3-inventory" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-us-east-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-dev-use1-s3-inventory.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-dev-use1-s3-inventory" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-media-conversion-software" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-software" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-us-east-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-software.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "sme-media-conversion-software" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "APP-SUPPORT" } } module "vantage-dev-test" { # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "vantage-dev-test" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.vantage-dev-test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "vantage-dev-test" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "vantage-test-media" { # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "vantage-test-media" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.vantage-test-media.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-unit = "AOMA-Conversion" Environment = "Dev" Name = "vantage-test-media" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" aws-migration-project-id = "MPE22602" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Classification = "internal-use-only" Terraform = "True" Purpose = "CLOUDOPS" } } module "sme-mc-dev-test" { # checkov:skip=CKV2_AWS_6:Public access intentionally enabled for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.mc-dev-test" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-media-conversion-dev-eu-central-1-logs" target_prefix = "sme-media-conversion-dev/" } object_ownership = "BucketOwnerEnforced" attach_public_policy = false object_lock_enabled = false block_public_acls = false ignore_public_acls = false restrict_public_buckets = false block_public_policy = false force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-dev-test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = false tags = { map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" Classification = "internal-use-only" Environment = "dev" Purpose = "CLOUDOPS" Business-unit = "AOMA-Conversion" Name = "sme.mc-dev-test" aws-migration-project-id = "MPE22602" } } module "sme-mc-stage-migration" { # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-stage-migration" providers = { aws = aws.eu-central-1 } versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" attach_public_policy = var.attach_public_policy block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-stage-migration.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = false tags = { map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" Classification = "internal-use-only" Environment = "dev" Purpose = "CLOUDOPS" Business-unit = "AOMA-Conversion" Name = "sme-mc-stage-migration" aws-migration-project-id = "MPE22602" } } module "sme-mcond-openobserve" { # checkov:skip=CKV_AWS_21:Versioning not required for this bucket # checkov:skip=CKV_AWS_145:KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19:At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_300:Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mcond-openobserve" versioning = { status = "Disabled" } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = { rule = { bucket_key_enabled = true apply_server_side_encryption_by_default = { kms_master_key_id = "" sse_algorithm = "AES256" } } } object_ownership = "BucketOwnerEnforced" block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy attach_policy = false attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Owner = "Ralph Capasso" map-migrated = "d-server-01tz6mps1jopod" map-win-modernized = "d-server-01tz6mps1jopod" Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Project-Name = "Media-Conversion" Classification = "internal-use-only" Environment = "dev" Purpose = "CLOUDOPS" Business-unit = "AOMA-Conversion" Terraform = "True" Name = "sme-mcond-openobserve" } }