Skip to content

Commit dc825b7

Browse files
committed
create datahub config bucket
1 parent 01fab12 commit dc825b7

File tree

2 files changed

+16
-0
lines changed

2 files changed

+16
-0
lines changed

terraform/compliance/s3.feature

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ Feature: S3
1313
@exclude_module.file_sync_destination_nec.aws_s3_bucket.log_bucket
1414
@exclude_module.arcus_data_storage.aws_s3_bucket.bucket
1515
@exclude_module.user_uploads.aws_s3_bucket.bucket
16+
@exclude_module.datahub_config.aws_s3_bucket.bucket
1617

1718
# This rule is in place for legacy buckets created with the deprecated block within the aws_s3_bucket resource
1819
Scenario: Data must be encrypted at rest for buckets created using server_side_encryption_configuration property within bucket resource

terraform/core/10-aws-s3-utility-buckets.tf

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -164,6 +164,21 @@ module "user_uploads" {
164164
include_backup_policy_tags = false
165165
}
166166

167+
#===============================================================================
168+
# DataHub Config Bucket to store the DataHub YAML configuration files
169+
#===============================================================================
170+
171+
module "datahub_config" {
172+
source = "../modules/s3-bucket"
173+
tags = module.tags.values
174+
project = var.project
175+
environment = var.environment
176+
identifier_prefix = local.identifier_prefix
177+
bucket_name = "datahub-config"
178+
bucket_identifier = "datahub-config"
179+
include_backup_policy_tags = false
180+
}
181+
167182
#===============================================================================
168183
# MWAA Buckets
169184
#===============================================================================

0 commit comments

Comments
 (0)