summaryrefslogtreecommitdiff
path: root/infrastructure/s3.tf
diff options
context:
space:
mode:
Diffstat (limited to 'infrastructure/s3.tf')
-rw-r--r--infrastructure/s3.tf78
1 files changed, 0 insertions, 78 deletions
diff --git a/infrastructure/s3.tf b/infrastructure/s3.tf
deleted file mode 100644
index 7b116a7..0000000
--- a/infrastructure/s3.tf
+++ /dev/null
@@ -1,78 +0,0 @@
-resource "aws_s3_bucket" "website" {
- bucket = local.bucket_name
-}
-
-locals {
- bucket_name = "${local.domain}-${var.secret_s3_bucket_suffix}"
-}
-
-resource "aws_s3_bucket_website_configuration" "website" {
- bucket = aws_s3_bucket.website.id
-
- index_document {
- suffix = "index.html"
- }
-
- error_document {
- key = "error/index.html"
- }
-}
-
-resource "aws_s3_bucket_ownership_controls" "website" {
- bucket = aws_s3_bucket.website.id
-
- rule {
- object_ownership = "BucketOwnerPreferred"
- }
-
- depends_on = [aws_s3_bucket_public_access_block.website]
-}
-
-resource "aws_s3_bucket_public_access_block" "website" {
- bucket = aws_s3_bucket.website.id
-
- block_public_acls = false
- block_public_policy = false
- ignore_public_acls = false
- restrict_public_buckets = false
-}
-
-resource "aws_s3_bucket_acl" "website" {
- bucket = aws_s3_bucket.website.id
-
- acl = "public-read"
-
- depends_on = [aws_s3_bucket_ownership_controls.website]
-}
-
-resource "aws_s3_bucket_versioning" "website" {
- bucket = aws_s3_bucket.website.id
-
- versioning_configuration {
- status = "Disabled"
- }
-}
-
-resource "aws_s3_bucket_policy" "website" {
- bucket = aws_s3_bucket.website.id
- policy = data.aws_iam_policy_document.website.json
-}
-
-# TODO: can we restrict access to just from the CloudFront distro?
-data "aws_iam_policy_document" "website" {
- statement {
- sid = "AllowPublicRead"
- effect = "Allow"
- resources = [
- "arn:aws:s3:::${local.bucket_name}",
- "arn:aws:s3:::${local.bucket_name}/*",
- ]
- actions = ["S3:GetObject"]
- principals {
- type = "*"
- identifiers = ["*"]
- }
- }
-
- depends_on = [aws_s3_bucket_public_access_block.website, aws_s3_bucket.website]
-}