From fc3f980cffd62f918bd602e80ceeb5b52cfb1797 Mon Sep 17 00:00:00 2001
From: KanchiMoe <5897898+KanchiMoe@users.noreply.github.com>
Date: Mon, 19 Sep 2022 18:04:52 +0100
Subject: [PATCH] server_side_encryption_configuration argument is deprecated
 (#7577)

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption
---
 .../loadtesting/terraform/firehose.tf          | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/infrastructure/loadtesting/terraform/firehose.tf b/infrastructure/loadtesting/terraform/firehose.tf
index b88e04e47e..f7047f9d8c 100644
--- a/infrastructure/loadtesting/terraform/firehose.tf
+++ b/infrastructure/loadtesting/terraform/firehose.tf
@@ -8,19 +8,21 @@ resource "aws_s3_bucket" "osquery-results" { #tfsec:ignore:aws-s3-encryption-cus
       days = 1
     }
   }
-
-  server_side_encryption_configuration {
-    rule {
-      apply_server_side_encryption_by_default {
-        sse_algorithm = "aws:kms"
-      }
-    }
-  }
   #checkov:skip=CKV_AWS_18:dev env
   #checkov:skip=CKV_AWS_144:dev env
   #checkov:skip=CKV_AWS_21:dev env
 }
 
+resource "aws_s3_bucket_server_side_encryption_configuration" "osquery-results" {
+  bucket = aws_s3_bucket.osquery-results.id
+
+  rule {
+    apply_server_side_encryption_by_default {
+      sse_algorithm     = "aws:kms"
+    }
+  }
+}
+
 resource "aws_s3_bucket_public_access_block" "osquery-results" {
   bucket = aws_s3_bucket.osquery-results.id