tf-website-s3-buckets.tf

resource "aws_s3_bucket" "log" {
  bucket = "${var.website_name}-log"
  acl    = "log-delivery-write"

  lifecycle_rule {
    enabled = true
    expiration {
      days = 30
    }
  }
}

resource "aws_s3_bucket" "website" {
  bucket = var.website_name
  acl    = "private"

  server_side_encryption_configuration {
    rule {
      apply_server_side_encryption_by_default {
        sse_algorithm = "AES256"
      }
    }
  }

  logging {
    target_bucket = aws_s3_bucket.log.id
    target_prefix = "s3-access-logs/"
  }

  versioning {
    enabled = false
  }
}