Merge pull request #13 from troy-ameigh/main

added bucket versioning.
aws-ia · Sep 22, 2023 · a221687 · a221687
2 parents 0eee190 + a69d66b
commit a221687
Showing 1 changed file with 33 additions and 2 deletions.
diff --git a/templates/git2s3.template.yaml b/templates/git2s3.template.yaml
@@ -147,6 +147,17 @@ Resources:
   LambdaZipsBucket:
     Type: AWS::S3::Bucket
     Properties:
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: AES256
+      PublicAccessBlockConfiguration:
+        BlockPublicAcls: true
+        BlockPublicPolicy: true
+        IgnorePublicAcls: true
+        RestrictPublicBuckets: true
+      VersioningConfiguration:
+        Status: Enabled
       Tags: []
 
   CopyZips:
@@ -276,6 +287,17 @@ Resources:
     Type: AWS::S3::Bucket
     Properties:
       Tags: []
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: AES256
+      PublicAccessBlockConfiguration:
+        BlockPublicAcls: true
+        BlockPublicPolicy: true
+        IgnorePublicAcls: true
+        RestrictPublicBuckets: true
+      VersioningConfiguration:
+        Status: Enabled
 
   OutputBucket:
     Type: AWS::S3::Bucket
@@ -284,6 +306,15 @@ Resources:
         - AutoGenOutputBucketName
         - !Ref 'OutputBucketName'
         - !Ref 'AWS::NoValue'
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: AES256
+      PublicAccessBlockConfiguration:
+        BlockPublicAcls: true
+        BlockPublicPolicy: true
+        IgnorePublicAcls: true
+        RestrictPublicBuckets: true
       VersioningConfiguration:
         Status: Enabled
       Tags: []
@@ -751,7 +782,7 @@ Resources:
                     - mv ./enc_key.pem ~/.ssh/id_rsa
                     - ls ~/.ssh/
                     - echo "Setting SSH config profile"
-                    - | 
+                    - |
                       cat > ~/.ssh/config <<EOF
                       Host *
                         AddKeysToAgent yes
@@ -766,7 +797,7 @@ Resources:
                     - |
                       if [ "$exclude_git" = "True" ]; then
                         zip -r $outputbucketkey ./ -x '*.git*'
-                      else 
+                      else
                         zip -r $outputbucketkey ./
                       fi
                     - ls -alh