@@ -11,20 +11,20 @@ resource "aws_s3_bucket" "logging_bucket" {
11
11
}
12
12
13
13
resource "random_string" "codepipeline_artifacts_s3_buckets" {
14
- for_each = var . codepipeline_pipelines == null ? {} : var . codepipeline_pipelines
14
+ for_each = local . safe_codepipeline_pipelines
15
15
length = 4
16
16
special = false
17
17
upper = false
18
18
}
19
19
20
20
resource "aws_s3_bucket" "codepipeline_artifacts_buckets" {
21
- for_each = var . codepipeline_pipelines == null ? {} : var . codepipeline_pipelines
21
+ for_each = local . safe_codepipeline_pipelines
22
22
bucket = " pipeline-artifacts-${ each . value . name } -${ random_string . codepipeline_artifacts_s3_buckets [each . key ]. result } "
23
23
force_destroy = true
24
24
}
25
25
26
26
resource "aws_s3_bucket_server_side_encryption_configuration" "codepipeline_encryption" {
27
- for_each = var . codepipeline_pipelines == null ? {} : var . codepipeline_pipelines
27
+ for_each = local . safe_codepipeline_pipelines
28
28
29
29
bucket = aws_s3_bucket. codepipeline_artifacts_buckets [each . key ]. id
30
30
@@ -42,7 +42,7 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "codepipeline_encr
42
42
# checkov:skip=CKV_AWS_144: "Ensure that S3 bucket has cross-region replication enabled"
43
43
44
44
resource "aws_s3_bucket_public_access_block" "codepipeline_bucket_pabs" {
45
- for_each = var . codepipeline_pipelines == null ? {} : var . codepipeline_pipelines
45
+ for_each = local . safe_codepipeline_pipelines
46
46
bucket = aws_s3_bucket. codepipeline_artifacts_buckets [each . key ]. id
47
47
48
48
block_public_acls = var. s3_public_access_block
@@ -52,7 +52,7 @@ resource "aws_s3_bucket_public_access_block" "codepipeline_bucket_pabs" {
52
52
}
53
53
54
54
resource "aws_s3_bucket_versioning" "codepipeline_versioning" {
55
- for_each = var . codepipeline_pipelines == null ? {} : var . codepipeline_pipelines
55
+ for_each = local . safe_codepipeline_pipelines
56
56
bucket = aws_s3_bucket. codepipeline_artifacts_buckets [each . key ]. id
57
57
58
58
versioning_configuration {
@@ -61,7 +61,7 @@ resource "aws_s3_bucket_versioning" "codepipeline_versioning" {
61
61
}
62
62
63
63
resource "aws_s3_bucket_lifecycle_configuration" "codepipeline_lifecycle" {
64
- for_each = var . codepipeline_pipelines == null ? {} : var . codepipeline_pipelines
64
+ for_each = local . safe_codepipeline_pipelines
65
65
bucket = aws_s3_bucket. codepipeline_artifacts_buckets [each . key ]. id
66
66
67
67
rule {
@@ -83,7 +83,7 @@ resource "aws_s3_bucket_lifecycle_configuration" "codepipeline_lifecycle" {
83
83
}
84
84
85
85
resource "aws_s3_bucket_logging" "codepipeline_logs" {
86
- for_each = var . codepipeline_pipelines == null ? {} : var . codepipeline_pipelines
86
+ for_each = local . safe_codepipeline_pipelines
87
87
88
88
bucket = aws_s3_bucket. codepipeline_artifacts_buckets [each . key ]. id
89
89
target_bucket = aws_s3_bucket. logging_bucket . id
0 commit comments