Discharge7443/fleet-terraform
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

logging-destination-firehose bucket configurations (#213)

Browse Source 
- Sets `blocked_encryption_types = ["NONE"]` in
logging-destination-firehose buckets
This commit is contained in:
Jorge Falcon
2026-04-08 16:43:06 -04:00
committed by GitHub
parent bdc3e4e49c
commit 1deabca4c6
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
addons/logging-destination-firehose/main.tf
+3
View File
@@ -27,6 +27,7 @@ resource "aws_s3_bucket_lifecycle_configuration" "osquery-results" {
resource "aws_s3_bucket_server_side_encryption_configuration" "osquery-results" {
bucket = aws_s3_bucket.osquery-results.bucket
rule {
blocked_encryption_types = ["NONE"]
apply_server_side_encryption_by_default {
sse_algorithm = "aws:kms"
}
@@ -67,6 +68,7 @@ resource "aws_s3_bucket_lifecycle_configuration" "osquery-status" {
resource "aws_s3_bucket_server_side_encryption_configuration" "osquery-status" {
bucket = aws_s3_bucket.osquery-status.bucket
rule {
blocked_encryption_types = ["NONE"]
apply_server_side_encryption_by_default {
sse_algorithm = "aws:kms"
}
@@ -107,6 +109,7 @@ resource "aws_s3_bucket_lifecycle_configuration" "audit" {
resource "aws_s3_bucket_server_side_encryption_configuration" "audit" {
bucket = aws_s3_bucket.audit.bucket
rule {
blocked_encryption_types = ["NONE"]
apply_server_side_encryption_by_default {
sse_algorithm = "aws:kms"
}