AWS S3 bucket Terraform module

Upstream version 5.15.4
6 controls from CIS AWS Benchmark v1.4.0 requirements

Terraform Module Source

cisv140.compliance.tf/terraform-aws-modules/s3-bucket/aws
ComplianceInputsOutputsResourcesDiff (2)README

Behavioral Summary

This module modifies 2 variable defaults and makes 0 resource changes from the upstream module. All changes are driven by compliance controls and can be reviewed in detail below.

Your Code Impact

If you are migrating from the upstream module, the enforced default changes mean your existing configurations will automatically gain compliance controls. Variables you have explicitly set will continue to use your values. Review the diff below to understand exactly what changes.

Compared to terraform-aws-modules/s3-bucket/aws@5.15.42 changes

Variables Changed

2
VariableUpstreamCTFReasonControl
server_side_encryption_configuration{}{ "rule": { "apply_server_side_encryption_by_defaul...To help protect data at rest, ensure encryption is enabled for your AWS Simple Storage Service (AWS S3) buckets.s3_bucket_default_encryption_enabled
versioning{}{ "mfa_delete": "Enabled" }Once MFA Delete is enabled on your sensitive and classified S3 bucket it requires the user to have two forms of authentication.s3_bucket_mfa_delete_enabled