module "athena-sme-media-conversion-prod-lambda-archived" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "athena-sme-media-conversion-prod-lambda-archived" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.athena-sme-media-conversion-prod-lambda-archived.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "athena-sme-media-conversion-prod-lambda-archived", Environment = "Prod", Classification = "internal-use-only", Business-Unit = "AOMA-Conversion", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", map-migrated = "migKNBMDMW06I", Terraform = "True", Purpose = "APP-SUPPORT" } } module "aws-athena-query-results-638682502729-eu-central-1" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-638682502729-eu-central-1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-athena-query-results-638682502729-eu-central-1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "aws-athena-query-results-638682502729-eu-central-1", Environment = "Prod", Classification = "internal-use-only", Business-Unit = "AOMA-Conversion", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", map-migrated = "migKNBMDMW06I", Terraform = "True", Purpose = "APP-SUPPORT" } } module "cf-templates-echsp986i7qp-eu-central-1" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "cf-templates-echsp986i7qp-eu-central-1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.cf-templates-echsp986i7qp-eu-central-1.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "cf-templates-echsp986i7qp-eu-central-1", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "CLOUDOPS" } } module "config-bmc-smcdp-de-aws-awsconfig" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "config-bmc-smcdp-de-aws-awsconfig" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.config-bmc-smcdp-de-aws-awsconfig.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "config-bmc-smcdp-de-aws-awsconfig", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "CLOUDOPS" } } module "eksctl-vpc-fl" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "eksctl-vpc-fl" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.eksctl-vpc-fl.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "eksctl-vpc-fl", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "CLOUDOPS" } } module "lightlytics-cur-638682502729" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "lightlytics-cur-638682502729" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.lightlytics-cur-638682502729.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { map-migrated = "migKNBMDMW06I", Classification = "internal-use-only", Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "lightlytics-cur-638682502729", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", Terraform = "True", Purpose = "APP-SUPPORT" } } module "mc-awsbilling-reports" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mc-awsbilling-reports" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mc-awsbilling-reports.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "mc-awsbilling-reports", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "mc-smcdp-de-aws-eu-central-1-logs" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mc-smcdp-de-aws-eu-central-1-logs" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mc-smcdp-de-aws-eu-central-1-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "mc-smcdp-de-aws-eu-central-1-logs", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", USE = "LOGGING", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "LOGGING" } } module "mc-swap" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mc-swap" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mc-swap.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "mc-swap", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "mcon-p-02-delivery-vpc-flow-logs" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mcon-p-02-delivery-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mcon-p-02-delivery-vpc-flow-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "mcon-p-02-delivery-vpc-flow-logs", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "LOGGING" } } module "mconp-ff-elb-logs" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mconp-ff-elb-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mconp-ff-elb-logs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "mconp-ff-elb-logs", Owner = "Ralph Capasso", Project-Code = "SME-2000-0306C", Project-Name = "Media-Conversion-Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "LOGGING" } } module "media-conversion-prod-terraform-state-files" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "media-conversion-prod-terraform-state-files" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy policy = data.aws_iam_policy_document.media-conversion-prod-terraform-state-files.json attach_policy = var.attach_policy attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { map-migrated = "migKNBMDMW06I", Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "media-conversion-prod-terraform-state-files", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "CLOUDOPS" } } module "sme-mc-hash" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-hash" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-hash.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-mc-hash", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "sme-mc-source" { # checkov:skip=CKV2_AWS_6: Public access intentionally enabled for this bucket # checkov:skip=CKV2_AWS_61: Replication not required for this bucket # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_18: Access logging not required for this S3 bucket # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-source" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-source.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-mc-source", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "sme-mc-target" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mc-target" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mc-target.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environtment = "Prod", Name = "sme-mc-target", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C", Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "sme-mcdel-p2--vpc-flowlogs" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mcdel-p2--vpc-flowlogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mcdel-p2--vpc-flowlogs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "Media Conversion", Environment = "Prod", Name = "sme-mcdel-p2--vpc-flowlogs", Owner = "Sang Han", Project-Code = "MCON", Project-Name = "MCON-DEL", map-migrated = "migKNBMDMW06I", Classification = "internal-use-only", Terraform = "True", Purpose = "LOGGING" } } module "sme-mcdel-p3-vpc-flowlogs" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-mcdel-p3-vpc-flowlogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-mcdel-p3-vpc-flowlogs.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "Media Conversion", Environment = "Prod", Name = "sme-mcdel-p3-vpc-flowlogs", Owner = "Sang Han", Project-Code = "MCON", Project-Name = "MCON-DEL", map-migrated = "migKNBMDMW06I", Classification = "internal-use-only", Terraform = "True", Purpose = "LOGGING" } } module "sme-media-conversion-prod-02-data-warehouse" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-prod-02-data-warehouse" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-prod-02-data-warehouse.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-media-conversion-prod-02-data-warehouse", Owner = "Ralph Capasso", Project-Code = "SME-2000-0306C", Project-Name = "Media-Conversion-Prod", aws-migration-project-id = "MPE22602", map-dba = "d-server-01tz6mps1jopod", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "sme-media-conversion-prod-athena-out" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-prod-athena-out" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy policy = data.aws_iam_policy_document.sme-media-conversion-prod-athena-out.json attach_policy = var.attach_policy attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-media-conversion-prod-athena-out", Owner = "Ralph Capasso", Project-Code = "SME-2000-0306C", Project-Name = "Media-Conversion-Prod", aws-migration-project-id = "MPE22602", map-dba = "d-server-01tz6mps1jopod", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "CLOUDOPS" } } module "sme-media-conversion-prod-euc1-s3-inventory" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-prod-euc1-s3-inventory" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-prod-euc1-s3-inventory.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-media-conversion-prod-euc1-s3-inventory", Owner = "Ralph Capasso", Project-Code = "SME-2000-0306C", Project-Name = "Media-Conversion-Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "CLOUDOPS" } } module "sme-media-conversion-prod-lambda-archived" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-prod-lambda-archived" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-prod-lambda-archived.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-media-conversion-prod-lambda-archived", Owner = "Ralph Capasso", Project-Code = "SME-2000-0306C", Project-Name = "Media-Conversion-Prod", aws-migration-project-id = "MPE22602", map-dba = "d-server-01tz6mps1jopod", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "sme-media-conversion-prod-quicksight" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-prod-quicksight" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-prod-quicksight.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-media-conversion-prod-quicksight", Owner = "Ralph Capasso", Project-Name = "Media Conversion Prod", Project-Code = "SME - 2000-0306C", map-migrated = "migKNBMDMW06I", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "sme-media-conversion-prod-rds-backups" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-prod-rds-backups" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-media-conversion-prod-rds-backups.json attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-media-conversion-prod-rds-backups", Owner = "Ralph Capasso", Project-Name = "Media Conversion Prod", Project-Code = "SME - 2000-0306C", map-migrated = "migKNBMDMW06I", Classification = "internal-use-only", Terraform = "True", Purpose = "APP-SUPPORT" } } module "sme-media-conversion-prod-ssm-out" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-media-conversion-prod-ssm-out" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "mc-smcdp-de-aws-eu-central-1-logs" target_prefix = "sme-media-conversion-prod/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy policy = data.aws_iam_policy_document.sme-media-conversion-prod-ssm-out.json attach_policy = var.attach_policy attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "AOMA-Conversion", Environment = "Prod", Name = "sme-media-conversion-prod-ssm-out", Owner = "Ralph Capasso", Project-Code = "SME - 2000-0306C" Project-Name = "Media Conversion Prod", aws-migration-project-id = "MPE22602", map-migrated = "d-server-01tz6mps1jopod", map-win-modernized = "d-server-01tz6mps1jopod", Classification = "internal-use-only", Terraform = "True", Purpose = "CLOUDOPS" } } module "aws-athena-query-results-eu-central-1-638682502729" { # checkov:skip=CKV_AWS_145: KMS encryption not required for this bucket # checkov:skip=CKV_AWS_19: At-rest encryption uses AES256 not KMS # checkov:skip=CKV_AWS_21: Versioning not required for this bucket # checkov:skip=CKV_AWS_300: Lifecycle rule for aborting incomplete multipart uploads not configured source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-eu-central-1-638682502729" providers = { aws = aws.eu-central-1 } versioning = { status = "Disabled" } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" attach_public_policy = var.attach_public_policy block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = false attach_deny_insecure_transport_policy = false attach_require_latest_tls_policy = false tags = { Owner = "Ralph Capasso" Project-Code = "SME-2000-0306C" Terraform = "True" Project-Name = "Media-Conversion-Prod" Classification = "internal-use-only" Environment = "Prod" Purpose = "APP-SUPPORT" Business-Unit = "AOMA-Conversion" Name = "aws-athena-query-results-eu-central-1-638682502729" } }