Force HTTPS only for buckets
Open
- Dominant language
- HCL
- Stars
- 0
- Forks
- 5
- PR merge metrics
- No merged PRs in 30d
Description
I wanted to suggest adding forcing HTTPS only for the Access and CloudTrail buckets created by this repository.
Adding something like the below policy to the logging and access buckets should do the trick!
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Deny",
"Principal": "*",
"Action": "*",
"Resource": [
"arn:aws:s3:::${aws_s3_bucket.logging.id}/*"
],
"Condition": {
"Bool": {
"aws:SecureTransport": "false"
}
}
}
]
}
```
Contributor guide
Assessment
This issue has not been assessed yet.