add statement attributes

terraform-modules · Oct 21, 2020 · a37fcc8 · a37fcc8
1 parent a9b8f60
commit a37fcc8
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -130,6 +130,13 @@ data "aws_iam_policy_document" "this" {
     }
   }
   statement {
+      sid           = "IPAddressRestriction"
+      effect        = "Deny"
+      actions       = ["s3:*"]
+      principals {
+        type        = "AWS"
+        identifiers = ["*"]
+      }
       dynamic "condition" {
         for_each = local.s3_bucket_conditions
         iterator = c