diff --git a/infrastructure/loadtesting/terraform/firehose.tf b/infrastructure/loadtesting/terraform/firehose.tf index dd3f89ef44..6476a65460 100644 --- a/infrastructure/loadtesting/terraform/firehose.tf +++ b/infrastructure/loadtesting/terraform/firehose.tf @@ -44,13 +44,17 @@ resource "aws_s3_bucket_public_access_block" "osquery-results" { resource "aws_s3_bucket" "osquery-status" { #tfsec:ignore:aws-s3-encryption-customer-key tfsec:ignore:aws-s3-enable-bucket-logging tfsec:ignore:aws-s3-enable-versioning bucket = "${local.prefix}-loadtest-osquery-status-archive" - acl = "private" #checkov:skip=CKV_AWS_18:dev env #checkov:skip=CKV_AWS_144:dev env #checkov:skip=CKV_AWS_21:dev env } +resource "aws_s3_bucket_acl" "osquery-status" { + bucket = aws_s3_bucket.osquery-status.id + acl = "private" +} + resource "aws_s3_bucket_lifecycle_configuration" "osquery-status" { bucket = aws_s3_bucket.osquery-status.id