junte/Model
1
0
Fork 0
mirror of https://github.com/Hestia-Homes/Model.git synced 2026-06-08 11:17:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #340 from Hestia-Homes/main

Browse source 
Blocking public access to presign buckets
This commit is contained in:
KhalimCK 2024-09-09 13:25:16 +01:00 • committed by GitHub
commit fc7c696ea9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
infrastructure/terraform/modules/s3_presignable_bucket/main.tf
View file

@ -6,7 +6,7 @@ resource "aws_s3_bucket" "bucket" {
allowed_headers = ["Content-Type", "Authorization"] allowed_headers = ["Content-Type", "Authorization"]
allowed_methods = ["PUT"] allowed_methods = ["PUT"]
allowed_origins = var.allowed_origins allowed_origins = var.allowed_origins
expose_headers = ["ETag"] expose_headers = ["ETag"]
max_age_seconds = 3000 max_age_seconds = 3000
} }
@ -73,3 +73,11 @@ resource "aws_iam_user_policy" "presign_frontend_user_policy" {
} }
EOF EOF
} }
resource "aws_s3_bucket_public_access_block" "block_public" {
bucket = aws_s3_bucket.bucket.id
block_public_acls = true
block_public_policy = true
ignore_public_acls = true
restrict_public_buckets = true
}