diff --git a/infrastructure/loadtesting/terraform/firehose.tf b/infrastructure/loadtesting/terraform/firehose.tf index b88e04e47e..f7047f9d8c 100644 --- a/infrastructure/loadtesting/terraform/firehose.tf +++ b/infrastructure/loadtesting/terraform/firehose.tf @@ -8,19 +8,21 @@ resource "aws_s3_bucket" "osquery-results" { #tfsec:ignore:aws-s3-encryption-cus days = 1 } } - - server_side_encryption_configuration { - rule { - apply_server_side_encryption_by_default { - sse_algorithm = "aws:kms" - } - } - } #checkov:skip=CKV_AWS_18:dev env #checkov:skip=CKV_AWS_144:dev env #checkov:skip=CKV_AWS_21:dev env } +resource "aws_s3_bucket_server_side_encryption_configuration" "osquery-results" { + bucket = aws_s3_bucket.osquery-results.id + + rule { + apply_server_side_encryption_by_default { + sse_algorithm = "aws:kms" + } + } +} + resource "aws_s3_bucket_public_access_block" "osquery-results" { bucket = aws_s3_bucket.osquery-results.id