module "aws-athena-query-results-981599956623-eu-central-1-g6cnw5v0" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-981599956623-eu-central-1-g6cnw5v0" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "aws-athena-query-results-981599956623-eu-central-1-g6cnw5v0", Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-athena-query-results-981599956623-eu-central-1-v4clj5fk" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-981599956623-eu-central-1-v4clj5fk" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "aws-athena-query-results-981599956623-eu-central-1-v4clj5fk", Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-athena-query-results-981599956623-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-981599956623-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-athena-query-results-981599956623-us-east-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "aws-athena-query-results-981599956623-us-east-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-athena-query-results-981599956623-us-east-1-13wwd71i" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-981599956623-us-east-1-13wwd71i" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "aws-athena-query-results-981599956623-us-east-1-13wwd71i", Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-athena-query-results-981599956623-us-east-1-ebejo4vl" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-981599956623-us-east-1-ebejo4vl" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = false attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "aws-athena-query-results-981599956623-us-east-1-ebejo4vl", Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-glue-assets-981599956623-eu-central-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-glue-assets-981599956623-eu-central-1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-glue-assets-981599956623-eu-central-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "aws-glue-assets-981599956623-eu-central-1", Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-glue-scripts-981599956623-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-glue-scripts-981599956623-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-glue-scripts-981599956623-us-east-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "aws-glue-scripts-981599956623-us-east-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-glue-temporary-981599956623-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-glue-temporary-981599956623-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-glue-temporary-981599956623-us-east-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "aws-glue-temporary-981599956623-us-east-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-logs-981599956623-eu-central-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-logs-981599956623-eu-central-1" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-logs-981599956623-eu-central-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "aws-logs-981599956623-eu-central-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "aws-logs-981599956623-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-logs-981599956623-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = "arn:aws:kms:us-east-1:981599956623:key/02ec5be1-0a51-4ab6-ab6e-7eea25a4523d" sse_algorithm = "aws:kms" } } } logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.aws-logs-981599956623-us-east-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "aws-logs-981599956623-us-east-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "ben-emr-test" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "ben-emr-test" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.ben-emr-test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "ben-emr-test" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "APP-SUPPORT", Terraform = "True" } } module "cf-templates-1gjdlx5bjzh2u-us-east-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "cf-templates-1gjdlx5bjzh2u-us-east-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.cf-templates-1gjdlx5bjzh2u-us-east-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "cf-templates-1gjdlx5bjzh2u-us-east-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "ckoi_bucket" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "ckoi_bucket" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.ckoi_bucket.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "ckoi_bucket" Owner = "Keith Osani" Project-code = "SME - 2000-0590E" Project-name = "Max Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "cm-hive-backup" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "cm-hive-backup" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.cm-hive-backup.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "cm-hive-backup" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "cm-query-results" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "cm-query-results" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.cm-query-results.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "cm-query-results" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "dsrv-dsp-package-xml-dev" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "dsrv-dsp-package-xml-dev" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.dsrv-dsp-package-xml-dev.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "dsrv-dsp-package-xml-dev" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "APP-SUPPORT", Terraform = "True" Owner = "Keith Osani" } } module "dsrv-dsp-package-xml-stg" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "dsrv-dsp-package-xml-stg" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.dsrv-dsp-package-xml-stg.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "dsrv-dsp-package-xml-stg" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" Owner = "Keith Osani" } } module "elasticbeanstalk-us-east-1-981599956623" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "elasticbeanstalk-us-east-1-981599956623" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.elasticbeanstalk-us-east-1-981599956623.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "elasticbeanstalk-us-east-1-981599956623" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "max-d-virginia-alb-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "max-d-virginia-alb-logs" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.max-d-virginia-alb-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "max-d-virginia-alb-logs" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "maxd-cm-athena-query-results" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "maxd-cm-athena-query-results" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.maxd-cm-athena-query-results.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "maxd-cm-athena-query-results" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "maxffs-vpc-flow-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "maxffs-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.maxffs-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "maxffs-vpc-flow-logs" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "maxohs-vpc-flow-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "maxohs-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.maxohs-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "maxohs-vpc-flow-logs" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "mps-EMR-Test" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mps-EMR-Test" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mps-EMR-Test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "mps-EMR-Test" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "mps-db-dump" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mps-db-dump" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mps-db-dump.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "mps-db-dump" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "mps_dev" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mps_dev" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mps_dev.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "mps_dev" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "mps_prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mps_prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mps_prod.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "mps_prod" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "mps_stage" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "mps_stage" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.mps_stage.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "mps_stage" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "oracle-data-cloudmps-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "oracle-data-cloudmps-1" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.oracle-data-cloudmps-1.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "oracle-data-cloudmps-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "sam-deploy-max-partner-asset-id" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sam-deploy-max-partner-asset-id" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sam-deploy-max-partner-asset-id.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sam-deploy-max-partner-asset-id", Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-dev-replay-datalake-test" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-dev-replay-datalake-test" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-dev-replay-datalake-test.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-dev-replay-datalake-test" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "APP-SUPPORT", Terraform = "True" } } module "sme-dev-replay-datalake-test-copy" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-dev-replay-datalake-test-copy" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-dev-replay-datalake-test-copy.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-dev-replay-datalake-test-copy" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "APP-SUPPORT", Terraform = "True" } } module "sme-max-dev-applogs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-dev-applogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-dev-applogs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-max-dev-applogs" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-max-dev-dataload" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-dev-dataload" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-dev-dataload.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-max-dev-dataload" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" Owner = "Keith Osani" } } module "sme-max-dev-eai-applogs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-dev-eai-applogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-dev-eai-applogs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-max-dev-eai-applogs" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-max-dev-noro002" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-dev-noro002" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-dev-noro002.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-max-dev-noro002" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "APP-SUPPORT", Terraform = "True" } } module "sme-max-dev-perm-group-store" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-dev-perm-group-store" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-dev-perm-group-store.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-dev-perm-group-store" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "sme-max-dev-reports" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-dev-reports" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-dev-reports.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-dev-reports" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" Owner = "Keith Osani" } } module "sme-max-dev-web-reports" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-dev-web-reports" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-dev-web-reports.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-dev-web-reports" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" Owner = "Keith Osani" } } module "sme-max-ff-alb-logs-euc" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-ff-alb-logs-euc" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-ff-alb-logs-euc.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-max-ff-alb-logs-euc" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Owner = "robert.dewiilder.ahi@sonymusic.com", Terraform = "True" } } module "sme-max-prod-reports-stage" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-prod-reports-stage" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-prod-reports-stage.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-prod-reports-stage" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Owner = "robert.dewiilder.ahi@sonymusic.com", Terraform = "True" } } module "sme-max-stage-applogs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-stage-applogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-stage-applogs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-max-stage-applogs" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-max-stage-dsrv-process-applogs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-stage-dsrv-process-applogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-stage-dsrv-process-applogs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-max-stage-dsrv-process-applogs" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-max-stage-eai-listener-applogs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-stage-eai-listener-applogs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-stage-eai-listener-applogs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-max-stage-eai-listener-applogs" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-max-stg-backfill-datalake" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-stg-backfill-datalake" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-stg-backfill-datalake.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-stg-backfill-datalake" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-max-stg-datalake" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-stg-datalake" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-stg-datalake.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-stg-datalake" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "sme-max-stg-perm-group-store" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-stg-perm-group-store" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-stg-perm-group-store.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-stg-perm-group-store" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT", Terraform = "True" } } module "sme-max-stg-perm-group-store-backfill" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-max-stg-perm-group-store-backfill" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-max-stg-perm-group-store-backfill.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-max-stg-perm-group-store-backfill" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-supply-chain-dev-awsconfig" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-dev-awsconfig" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-dev-awsconfig.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-supply-chain-dev-awsconfig" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-supply-chain-dev-us-east-1-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-dev-us-east-1-logs" versioning = { enabled = true } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-dev-us-east-1-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-supply-chain-dev-us-east-1-logs" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" USE = "LOGGING" Classification = "internal-use-only", Purpose = "LOGGING", Terraform = "True" } } module "sme-supply-chain-max-dev-athena-out" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-athena-out" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-athena-out.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-supply-chain-max-dev-athena-out" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" Owner = "robert.dewiilder.ahi@sonymusic.com" } } module "sme-supply-chain-max-dev-eailistener-processor-s3" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-eailistener-processor-s3" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-eailistener-processor-s3.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "sme-supply-chain-max-dev-eailistener-processor-s3" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-supply-chain-max-dev-euc1-s3-inventory" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-euc1-s3-inventory" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-euc1-s3-inventory.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-supply-chain-max-dev-euc1-s3-inventory" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Owner = "robert.dewiilder.ahi@sonymusic.com", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-supply-chain-max-dev-max-d2-vpc-flow-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-max-d2-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-max-d2-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-supply-chain-max-dev-max-d2-vpc-flow-logs" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-supply-chain-max-dev-ohstream-processor-s3" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-ohstream-processor-s3" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-ohstream-processor-s3.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-supply-chain-max-dev-ohstream-processor-s3" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-supply-chain-max-dev-s3-ff-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-s3-ff-logs" versioning = { enabled = true } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-s3-ff-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-supply-chain-max-dev-s3-ff-logs" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" USE = "LOGGING" Classification = "internal-use-only", Purpose = "LOGGING", Terraform = "True" } } module "sme-supply-chain-max-dev-ssm-out" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-ssm-out" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-ssm-out.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-supply-chain-max-dev-ssm-out" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "sme-supply-chain-max-dev-use1-s3-inventory" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-use1-s3-inventory" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-dev-use1-s3-inventory.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "sme-supply-chain-max-dev-use1-s3-inventory" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" Owner = "robert.dewiilder.ahi@sonymusic.com" } } module "sme-supply-chain-max-prod" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-prod" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.sme-supply-chain-max-prod.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-supply-chain-max-prod" Business-Unit = "MAX", Project-Name = "MAX", Project-Code = "SME-2000-0590E", Owner = "robert.dewiilder.ahi@sonymusic.com", Environment = "Dev", Classification = "internal-use-only", Purpose = "CLOUDOPS", Terraform = "True" } } module "supply-chain-dev-rds-log-backup" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "supply-chain-dev-rds-log-backup" versioning = { enabled = false } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = "arn:aws:kms:us-east-1:981599956623:key/02ec5be1-0a51-4ab6-ab6e-7eea25a4523d" sse_algorithm = "aws:kms" } } } logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.supply-chain-dev-rds-log-backup.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "supply-chain-dev-rds-log-backup" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "supplychain-dev-rman-backups" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "supplychain-dev-rman-backups" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.supplychain-dev-rman-backups.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Classification = "internal-use-only" Environment = "Dev" Name = "supplychain-dev-rman-backups" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True" } } module "vpc-max-dev-vpc-flow-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "vpc-max-dev-vpc-flow-logs" versioning = { enabled = false } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = var.attach_policy policy = data.aws_iam_policy_document.vpc-max-dev-vpc-flow-logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Business-Unit = "EOM" Environment = "Dev" Name = "vpc-max-dev-vpc-flow-logs" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "CLOUDOPS", Terraform = "True", Classification = "internal-use-only", Owner = "robert.dewiilder.ahi@sonymusic.com" } } module "sme-gluetest" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.gluetest" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = true policy = data.aws_iam_policy_document.sme-gluetest.json attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.gluetest" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "True" } } module "sme-for-mike-gupta" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.for.mike.gupta" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = true policy = data.aws_iam_policy_document.sme-for-mike-gupta.json attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.for.mike.gupta" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "True" } } module "sme-dr-dev-lambda" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.dr.dev.lambda" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.dr.dev.lambda" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "True" } } module "sme-dr-dev-dataloading" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.dr.dev.dataloading" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.dr.dev.dataloading" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "True" } } module "sme-dr-dev-dataloading-mysql" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.dr.dev.dataloading.mysql" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.dr.dev.dataloading.mysql" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "True" } } module "sme-dr-dev-dataloading-postgresql" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.dr.dev.dataloading.postgresql" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.dr.dev.dataloading.postgresql" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "True" } } module "asme-dr-dev-dataload" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. #checkov:skip=CKV2_AWS_6: Ensure that S3 bucket has a Public Access block. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.dr.dev.dataload" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = false block_public_policy = false ignore_public_acls = false restrict_public_buckets = false object_ownership = "BucketOwnerEnforced" policy = data.aws_iam_policy_document.sme-dr-dev-dataload.json attach_public_policy = false attach_policy = true attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.dr.dev.dataload" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purspose = "APP-SUPPORT" Terraform = "True" } } module "sme-gluetest-temp" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.gluetest.temp" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.gluetest.temp" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "False" } } module "sme-max-dev-datalake" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. #checkov:skip=CKV2_AWS_6: Ensure that S3 bucket has a Public Access block. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.max.dev.datalake" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = false block_public_policy = false ignore_public_acls = false restrict_public_buckets = false object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = true policy = data.aws_iam_policy_document.sme-max-dev-datalake.json attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.max.dev.datalake" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "False" } } module "sme-max-dev-gracenote" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.max.dev.gracenote" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.max.dev.gracenote" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "False" } } module "aws-athena-query-results-981599956623-eu-central-1" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "aws-athena-query-results-981599956623-eu-central-1" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } providers = { aws = aws.eu-central-1 } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "aws-athena-query-results-981599956623-eu-central-1" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "False" } } module "smedmaxddevddataload" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme.max.dev.dataload" object_lock_enabled = false logging = { target_bucket = "sme-supply-chain-dev-us-east-1-logs" target_prefix = "sme-supply-chain-max-dev/" } server_side_encryption_configuration = { rule = { apply_server_side_encryption_by_default = { kms_master_key_id = null sse_algorithm = "AES256" } bucket_key_enabled = false } } block_public_acls = var.block_public_acls block_public_policy = var.block_public_policy ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets object_ownership = "BucketOwnerEnforced" attach_public_policy = false attach_policy = false attach_deny_insecure_transport_policy = true attach_require_latest_tls_policy = false tags = { Business-unit = "EOM" Classification = "internal-use-only" Environment = "dev" Name = "sme.max.dev.dataload" Owner = "Keith Osani" Project-Code = "SME-2000-0590E" Project-Name = "Max-Dev" Purpose = "APP-SUPPORT" Terraform = "False" } } module "sme-supply-chain-max-dev-max-u3-vpc-flow-logs" { #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is. #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is. source = "terraform-aws-modules/s3-bucket/aws" version = "~> 3.11.0" bucket = "sme-supply-chain-max-dev-max-u3-vpc-flow-logs" versioning = { enabled = false } providers = { aws = aws.eu-central-1 } server_side_encryption_configuration = var.server_side_encryption_configuration logging = { target_bucket = "sme-supply-chain-max-dev-s3-ff-logs" target_prefix = "sme-supply-chain-max-dev/" } object_ownership = "BucketOwnerEnforced" object_lock_enabled = false block_public_acls = var.block_public_acls ignore_public_acls = var.ignore_public_acls restrict_public_buckets = var.restrict_public_buckets block_public_policy = var.block_public_policy force_destroy = var.force_destroy attach_policy = true policy = data.aws_iam_policy_document.sme_supply_chain_max_dev_max_u3_vpc_flow_logs.json attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy attach_require_latest_tls_policy = var.attach_require_latest_tls_policy tags = { Name = "sme-supply-chain-max-dev-max-u3-vpc-flow-logs" Environment = "Dev" Business-Unit = "SME-MAX" Owner = "chris.mollis.objectlab@sonymusic.com" Project-Code = "SME-2000-0590E" Project-Name = "SME-Max-Dev" CLOPS_APPROVED = "True" Terraform = "True" Classification = "internal-use-only" Purpose = "CLOUDOPS" } }