module "aws-athena-query-results-504436705349-eu-central-1-4wty1cl2" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "aws-athena-query-results-504436705349-eu-central-1-4wty1cl2"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = null
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "aws-athena-query-results-504436705349-eu-central-1-4wty1cl2"
  Purpose = "APP-SUPPORT" }
}

module "aws-athena-query-results-504436705349-eu-central-1-imbvngk9" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "aws-athena-query-results-504436705349-eu-central-1-imbvngk9"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = null
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "aws-athena-query-results-504436705349-eu-central-1-imbvngk9"
  Purpose = "APP-SUPPORT" }
}

module "aws-athena-query-results-504436705349-eu-central-1-rqqmyc1k" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "aws-athena-query-results-504436705349-eu-central-1-rqqmyc1k"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = null
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.aws-athena-query-results-504436705349-eu-central-1-rqqmyc1k.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "aws-athena-query-results-504436705349-eu-central-1-rqqmyc1k"
  Purpose = "APP-SUPPORT" }
}

module "aws-logs-504436705349-eu-central-1" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "aws-logs-504436705349-eu-central-1"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.aws-logs-504436705349-eu-central-1.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "aws-logs-504436705349-eu-central-1"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "cf-templates-1djuyaw7ij47i-us-east-1" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "cf-templates-1djuyaw7ij47i-us-east-1"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.cf-templates-1djuyaw7ij47i-us-east-1.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "cf-templates-1djuyaw7ij47i-us-east-1"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "dsrv-dsp-package-xml-prod" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "dsrv-dsp-package-xml-prod"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.dsrv-dsp-package-xml-prod.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "dsrv-dsp-package-xml-prod"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "max-p-virginia-alb-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "max-p-virginia-alb-logs"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.max-p-virginia-alb-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "max-p-virginia-alb-logs"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "max-va-audit-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "max-va-audit-vpc-flow-logs"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.max-va-audit-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "max-va-audit-vpc-flow-logs"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "maxffp-vpc-fl" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "maxffp-vpc-fl"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.maxffp-vpc-fl.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "maxffp-vpc-fl"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "maxsparkconfigdata" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "maxsparkconfigdata"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.maxsparkconfigdata.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "maxsparkconfigdata"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sam-deploy-max-prod-partner-asset-id" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sam-deploy-max-prod-partner-asset-id"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sam-deploy-max-prod-partner-asset-id.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sam-deploy-max-prod-partner-asset-id"
    Owner          = "Keith Osani"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-artifacts-sandbox-prod" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-artifacts-sandbox-prod"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-artifacts-sandbox-prod.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Dev"
    Name           = "sme-max-artifacts-sandbox-prod"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Dev"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-emr-studio-workspace-prod" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-emr-studio-workspace-prod"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-emr-studio-workspace-prod.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Dev"
    Name           = "sme-max-emr-studio-workspace-prod"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Dev"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-itunes-import" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-itunes-import"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-itunes-import.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-itunes-import"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
  Purpose = "CLOUDOPS" }
}

module "sme-max-prod-datalake" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-datalake"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-datalake.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-datalake"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-datalake-backup" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-datalake-backup"
  versioning = {
    enabled = true
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-datalake-backup.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-datalake-backup"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-datalake-iceberg" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-datalake-iceberg"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-datalake-iceberg.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-datalake-iceberg"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-datalake-streaming" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-datalake-streaming"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-datalake-streaming.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-datalake-streaming"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-dataload" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-dataload"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-dataload.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-dataload"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-dsrv-process-applogs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-dsrv-process-applogs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-dsrv-process-applogs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-max-prod-dsrv-process-applogs"
  Purpose = "CLOUDOPS" }
}

module "sme-max-prod-eai-listener-applogs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-eai-listener-applogs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-eai-listener-applogs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-eai-listener-applogs"
    Owner          = "Joe Rinaldi"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-perm-group-store" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-perm-group-store"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-perm-group-store.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-perm-group-store"
    Owner          = "Keith Osani"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-prod-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-prod-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-prod-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-prod-logs"
    Owner          = "Joe Rinaldi"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-max-prod-replay-datalake" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-replay-datalake"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-replay-datalake.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-replay-datalake"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-replay-datalake-backup" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-replay-datalake-backup"
  versioning = {
    enabled = true
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-replay-datalake-backup.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-replay-datalake-backup"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-replay-datalake-conversion" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-replay-datalake-conversion"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-replay-datalake-conversion.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-replay-datalake-conversion"
    Owner          = "Joe Rinaldi"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-replay-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-replay-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-replay-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-max-prod-replay-logs"
    Owner          = "Joe Rinaldi"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-max-prod-reports" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-prod-reports"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-prod-reports.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "prod"
    Name           = "sme-max-prod-reports"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
  Purpose = "APP-SUPPORT" }
}

module "sme-maxp-athena-results-ff" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-maxp-athena-results-ff"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-maxp-athena-results-ff.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-maxp-athena-results-ff"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-maxp-athena-results-noro002" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-maxp-athena-results-noro002"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-maxp-athena-results-noro002.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-maxp-athena-results-noro002"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-maxp-athena-search-results" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-maxp-athena-search-results"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-maxp-athena-search-results.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-maxp-athena-search-results"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-athena-out" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-athena-out"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-athena-out.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-max-prod-athena-out"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-eailistener-processor-s3" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-eailistener-processor-s3"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-eailistener-processor-s3.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "prod"
    Name           = "sme-supply-chain-max-prod-eailistener-processor-s3"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-elb-euc1-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-elb-euc1-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-elb-euc1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-max-prod-elb-euc1-logs"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-euc1-s3-inventory" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-euc1-s3-inventory"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-euc1-s3-inventory.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-max-prod-euc1-s3-inventory"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-max-p2-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-max-p2-vpc-flow-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-max-p2-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-max-prod-max-p2-vpc-flow-logs"
    Owner          = "Joe Rinaldi"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-ohstream-processor-s3" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-ohstream-processor-s3"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-ohstream-processor-s3.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-max-prod-ohstream-processor-s3"
    Owner          = "Joe Rinaldi"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-ssm-out" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-ssm-out"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-ssm-out.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-max-prod-ssm-out"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-max-prod-use1-s3-inventory" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-use1-s3-inventory"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-use1-s3-inventory.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-max-prod-use1-s3-inventory"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-prod-awsconfig" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-prod-awsconfig"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-prod-awsconfig.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-prod-awsconfig"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}

module "sme-supply-chain-prod-eu-central-1-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-prod-eu-central-1-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-prod-eu-central-1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-prod-eu-central-1-logs"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "LOGGING"
    Terraform      = "True"
  USE = "LOGGING" }
}

module "sme-supply-chain-prod-us-east-1-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-prod-us-east-1-logs"
  versioning = {
    enabled = true
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-supply-chain-prod-us-east-1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "sme-supply-chain-prod-us-east-1-logs"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "LOGGING"
    Terraform      = "True"
  USE = "LOGGING" }
}

module "supply-chain-prod-rds-log-backup" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "supply-chain-prod-rds-log-backup"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:us-east-1:504436705349:key/045f9c95-9172-4c99-a7fb-7a4872df8318"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.supply-chain-prod-rds-log-backup.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "supply-chain-prod-rds-log-backup"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "APP-SUPPORT"
  Terraform = "True" }
}

module "vpc-max-prod-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "vpc-max-prod-vpc-flow-logs"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-us-east-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.vpc-max-prod-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Name           = "vpc-max-prod-vpc-flow-logs"
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Purpose        = "CLOUDOPS"
  Terraform = "True" }
}


module "sme-max-prod-archives" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme.max.prod.archives"

  versioning = {
    status = "Suspended"
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership        = "BucketOwnerEnforced"
  object_lock_enabled     = false
  attach_public_policy    = false
  block_public_acls       = var.block_public_acls
  ignore_public_acls      = var.ignore_public_acls
  restrict_public_buckets = var.restrict_public_buckets
  block_public_policy     = var.block_public_policy
  force_destroy           = null

  tags = {
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Classification = "internal-use-only"
    Environment    = "prod"
    Business-unit  = "EOM"
    Name           = "sme.max.prod.archives"
    Purpose        = "APP-SUPPORT"
  }
}

module "sme-max-prod-gracenote" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme.max.prod.gracenote"

  versioning = {
    status = "Disabled"
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership        = "BucketOwnerEnforced"
  object_lock_enabled     = false
  attach_public_policy    = false
  block_public_acls       = var.block_public_acls
  ignore_public_acls      = var.ignore_public_acls
  restrict_public_buckets = var.restrict_public_buckets
  block_public_policy     = var.block_public_policy
  force_destroy           = null

  tags = {
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Classification = "internal-use-only"
    Environment    = "prod"
    Business-unit  = "EOM"
    Name           = "sme.max.prod.gracenote"
    Purpose        = "APP-SUPPORT"
  }
}

module "sme-supplychain-prod-cloudops" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme.supplychain.prod.cloudops"

  versioning = {
    status = "Suspended"
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership        = "BucketOwnerEnforced"
  object_lock_enabled     = false
  attach_public_policy    = false
  block_public_acls       = var.block_public_acls
  ignore_public_acls      = var.ignore_public_acls
  restrict_public_buckets = var.restrict_public_buckets
  block_public_policy     = var.block_public_policy
  #force_destroy                         = var.force_destroy

  tags = {
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Classification = "internal-use-only"
    Environment    = "prod"
    Business-unit  = "EOM"
    Name           = "sme.supplychain.prod.cloudops"
    Purpose        = "APP-SUPPORT"
  }
}

module "sme-max-prod-dataload2" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme.max.prod.dataload"

  versioning = {
    status = "Suspended"
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership        = "BucketOwnerEnforced"
  object_lock_enabled     = false
  attach_public_policy    = false
  block_public_acls       = var.block_public_acls
  ignore_public_acls      = var.ignore_public_acls
  restrict_public_buckets = var.restrict_public_buckets
  block_public_policy     = var.block_public_policy
  #force_destroy                         = var.force_destroy

  tags = {
    Owner          = "Joe Rinaldi"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Prod"
    Classification = "internal-use-only"
    Environment    = "prod"
    Business-unit  = "EOM"
    Name           = "sme.max.prod.dataload"
    Purpose        = "APP-SUPPORT"
  }
}

module "aws-athena-query-results-504436705349-eu-central-1" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"

  bucket              = "aws-athena-query-results-504436705349-eu-central-1"
  object_lock_enabled = false
  logging = {

    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"

    target_prefix = "sme-supply-chain-max-prod/"
  }
  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = null
        sse_algorithm     = "AES256"
      }
      bucket_key_enabled = false
    }
  }
  providers = {
    aws = aws.eu-central-1
  }

  block_public_acls                     = var.block_public_acls
  block_public_policy                   = var.block_public_policy
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  object_ownership                      = "BucketOwnerEnforced"
  attach_public_policy                  = false
  attach_policy                         = false
  attach_deny_insecure_transport_policy = true
  attach_require_latest_tls_policy      = false
  tags = {
    Business-unit  = "EOM"
    Classification = "internal-use-only"
    Environment    = "dev"
    Name           = "aws-athena-query-results-504436705349-eu-central-1"
    Owner          = "Keith Osani"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "Max-Dev"
    Purpose        = "APP-SUPPORT"
    Terraform      = "False"
  }

}

module "sme-supply-chain-max-prod-max-p3-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-supply-chain-max-prod-max-p3-vpc-flow-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-supply-chain-prod-eu-central-1-logs"
    target_prefix = "sme-supply-chain-max-prod/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  policy                                = data.aws_iam_policy_document.sme-supply-chain-max-prod-max-p3-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-supply-chain-max-prod-max-p3-vpc-flow-logs"
    Environment    = "Prod"
    Business-Unit  = "SME-MAX"
    Owner          = "chris.mollis.objectlab@sonymusic.com"
    Project-Code   = "SME-2000-0590E"
    Project-Name   = "SME-Max-Prod"
    CLOPS_APPROVED = "True"
    Terraform      = "True"
    Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}