feat: Support bucket encryption for existing cloudtrail

Signed-off-by: Lei Jin <lei.jin@lacework.net>
lacework · Sep 5, 2024 · 4b84141 · 4b84141
1 parent e5ecd21
commit 4b84141
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/lwgenerate/aws/aws.go b/lwgenerate/aws/aws.go
@@ -1058,14 +1058,14 @@ func createCloudtrail(args *GenerateAwsTfConfigurationArgs) (*hclwrite.Block, er
 			if args.BucketName != "" {
 				attributes["bucket_name"] = args.BucketName
 			}
-			if args.BucketEncryptionEnabledSet {
-				if args.BucketEncryptionEnabled {
-					if args.BucketSseKeyArn != "" {
-						attributes["bucket_sse_key_arn"] = args.BucketSseKeyArn
-					}
-				} else {
-					attributes["bucket_encryption_enabled"] = false
+		}
+		if args.BucketEncryptionEnabledSet {
+			if args.BucketEncryptionEnabled {
+				if args.BucketSseKeyArn != "" {
+					attributes["bucket_sse_key_arn"] = args.BucketSseKeyArn
 				}
+			} else {
+				attributes["bucket_encryption_enabled"] = false
 			}
 		}
 		if args.S3BucketNotification {