Dev

aws_caller_identity.tf

@@ -0,0 +1,3 @@
+data "aws_caller_identity" "main" {
+
+}

aws_canonical_user_id.tf

@@ -0,0 +1 @@
+data "aws_canonical_user_id" "main" {}

aws_region.tf

@@ -0,0 +1,3 @@
+data "aws_region" "main" {
+
+}

aws_s3_bucket.tf

@@ -0,0 +1,13 @@
+resource "aws_s3_bucket" "main" {
+  bucket        = lower("${data.aws_caller_identity.main.account_id}-${local.organization}")
+  force_destroy = true
+  tags = {
+    caller_identity_account_arn = data.aws_caller_identity.main.arn
+    caller_identity_account_id  = data.aws_caller_identity.main.account_id
+    caller_identity_user_id     = data.aws_caller_identity.main.user_id
+    canonical_user_id           = data.aws_canonical_user_id.main.id
+    organization                = local.organization
+    region                      = data.aws_region.main.name
+    workspace                   = terraform.workspace
+  }
+}

aws_s3_bucket_acl.tf

@@ -0,0 +1,4 @@
+resource "aws_s3_bucket_acl" "main" {
+  acl    = "private"
+  bucket = aws_s3_bucket_ownership_controls.main.bucket
+}

aws_s3_bucket_logging.tf

@@ -0,0 +1,5 @@
+resource "aws_s3_bucket_logging" "main" {
+  bucket        = aws_s3_bucket.main.bucket
+  target_bucket = aws_s3_bucket.main.bucket
+  target_prefix = aws_s3_object.log.key
+}

aws_s3_bucket_ownership_controls.tf

@@ -0,0 +1,6 @@
+resource "aws_s3_bucket_ownership_controls" "main" {
+  bucket = aws_s3_bucket.main.bucket
+  rule {
+    object_ownership = "BucketOwnerEnforced"
+  }
+}

aws_s3_bucket_public_access_block.tf

@@ -0,0 +1,7 @@
+resource "aws_s3_bucket_public_access_block" "main" {
+  block_public_acls       = true
+  block_public_policy     = true
+  bucket                  = aws_s3_bucket_acl.main.bucket
+  ignore_public_acls      = true
+  restrict_public_buckets = true
+}

aws_s3_bucket_versioning.tf

@@ -0,0 +1,8 @@
+resource "aws_s3_bucket_versioning" "main" {
+  bucket                = aws_s3_bucket.main.bucket
+  expected_bucket_owner = data.aws_caller_identity.main.account_id
+  versioning_configuration {
+    mfa_delete = "Disabled"
+    status     = "Disabled"
+  }
+}

aws_s3_object.tf

@@ -0,0 +1,8 @@
+resource "aws_s3_object" "log" {
+  acl              = "private"
+  bucket           = aws_s3_bucket.main.bucket
+  content_language = "en-US"
+  content_type     = "application/x-directory"
+  force_destroy    = true
+  key              = "log/"
+}

local.tf

@@ -0,0 +1,3 @@
+locals {
+  organization = lower(random_pet.organization.id)
+}

provider.tf

@@ -0,0 +1,3 @@
+provider "aws" {
+  region = var.aws_region
+}

random_pet.tf

@@ -0,0 +1,3 @@
+resource "random_pet" "organization" {
+  length = var.random_pet
+}

variable.tf

@@ -0,0 +1,11 @@
+variable "aws_region" {
+  default     = "us-east-1"
+  description = "The AWS region for the hosted infrastructure."
+  type        = string
+}
+
+variable "random_pet" {
+  default     = 1
+  description = "The amount of names to be used as unique identifiers."
+  type        = number
+}