feat: No public access

Selleo · Apr 26, 2024 · b41d15d · b41d15d
1 parent 8dc4471
commit b41d15d
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/examples/cloudfront-app/main.tf b/examples/cloudfront-app/main.tf
@@ -7,6 +7,15 @@ resource "aws_s3_bucket" "this" {
   bucket = "apps-${random_id.example.hex}"
 }
 
+resource "aws_s3_bucket_public_access_block" "this" {
+  bucket = aws_s3_bucket.this.id
+
+  block_public_acls       = true
+  block_public_policy     = true
+  ignore_public_acls      = true
+  restrict_public_buckets = true
+}
+
 module "cloudfront_app" {
   source = "../../modules/cloudfront-app"