Fixes nozaq#40

Author: centyx

modules/secure-bucket/main.tf

@@ -16,6 +16,15 @@ resource "aws_s3_bucket" "access_log" {
   }
 }
 
+resource "aws_s3_bucket_public_access_block" "access_log" {
+  bucket = aws_s3_bucket.access_log.id
+
+  block_public_acls = true
+  block_public_policy = true
+  ignore_public_acls = true
+  restrict_public_buckets = true
+}
+
 resource "aws_s3_bucket" "content" {
   bucket = var.bucket_name
 
@@ -50,3 +59,11 @@ resource "aws_s3_bucket" "content" {
   }
 }
 
+resource "aws_s3_bucket_public_access_block" "content" {
+  bucket = aws_s3_bucket.content.id
+
+  block_public_acls = true
+  block_public_policy = true
+  ignore_public_acls = true
+  restrict_public_buckets = true
+}