s3-flow-logs: backport from tf-upgrade changes for bucket encryption …

…to sse-s3
terraform-modules · Nov 1, 2022 · 5aa6a3a · 5aa6a3a
1 parent 9b384d1
commit 5aa6a3a
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -179,3 +179,8 @@
 * 1.16.2 -- 2022-07-20
   - iam-general-policies
     - add census ipv6 2610:20:2000::/38
+
+* 1.16.3 -- 2022-11-01
+  - s3-flow-logs
+    - change encryption to AES256 from aws:kms (no default for log delivery)
+    - update policy according to docs: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-s3.html  
diff --git a/common/data.tf b/common/data.tf
@@ -6,6 +6,10 @@ data "aws_arn" "current" {
 
 data "aws_region" "current" {}
 
+data "aws_regions" "current" {
+  all_regions = true
+}
+
 # output "caller_account_id" {
 #   value = data.aws_caller_identity.current.account_id
 # }

diff --git a/common/defaults.tf b/common/defaults.tf
@@ -3,6 +3,17 @@
 
 locals {
   _defaults = {
+    "account_settings" = {
+      allow_users_to_change_password = true
+      hard_expiry                    = false
+      max_password_age               = 89
+      minimum_password_length        = 14
+      password_reuse_prevention      = 24
+      require_lowercase_characters   = true
+      require_numbers                = true
+      require_symbols                = true
+      require_uppercase_characters   = true
+    }
     "load-balancer" = {
       "gov"           = ["190560391635", "048591011584"]
       "us-gov-east-1" = "190560391635"

diff --git a/common/version.tf b/common/version.tf
@@ -1,3 +1,3 @@
 locals {
-  _module_version = "1.16.2"
+  _module_version = "1.16.3"
 }