s3-buckets.tf

resource "aws_kms_key" "s3_encryption_kms_key" {
  description = "storage encryption key"

  provider = aws.env
}

module "blackbox_exporter_lb_access_logging" {
  source = "./modules/s3_bucket"

  name                           = "blackbox-exporter-lb-access-logging"
  prefix_pttp                    = module.label_pttp.id
  tags                           = module.label_pttp.tags
  versioning_status              = "Suspended"
  encryption_enabled             = false
  attach_elb_log_delivery_policy = true
  is_production                  = var.is-production
  kms_key_arn                    = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                     = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "grafana-image-storage" {
  source = "./modules/s3_bucket"

  name               = "grafana-image-storage"
  prefix_pttp        = module.label_pttp.id
  tags               = module.label_pttp.tags
  encryption_enabled = false
  versioning_status  = "Suspended"
  is_production      = var.is-production
  kms_key_arn        = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id         = aws_kms_key.s3_encryption_kms_key.key_id
  target_bucket      = module.s3_access_logging.bucket_name

  providers = {
    aws = aws.env
  }
}

module "grafana_lb_access_logging" {
  source = "./modules/s3_bucket"

  name                           = "grafana-lb-access-logging"
  prefix_pttp                    = module.label_pttp.id
  tags                           = module.label_pttp.tags
  versioning_status              = "Suspended"
  encryption_enabled             = false
  attach_elb_log_delivery_policy = true
  is_production                  = var.is-production
  kms_key_arn                    = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                     = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "prometheus_lb_access_logging" {
  source = "./modules/s3_bucket"

  name                           = "prometheus-lb-access-logging"
  prefix_pttp                    = module.label_pttp.id
  tags                           = module.label_pttp.tags
  versioning_status              = "Suspended"
  encryption_enabled             = false
  attach_elb_log_delivery_policy = true
  is_production                  = var.is-production
  kms_key_arn                    = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                     = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "prometheus-thanos-storage" {
  source = "./modules/s3_bucket"

  name               = "thanos-storage"
  prefix_pttp        = module.label_pttp.id
  tags               = module.label_pttp.tags
  encryption_enabled = true
  is_production      = var.is-production
  kms_key_arn        = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id         = aws_kms_key.s3_encryption_kms_key.key_id
  target_bucket      = module.s3_access_logging.bucket_name

  providers = {
    aws = aws.env
  }

  depends_on = [aws_kms_key.s3_encryption_kms_key]
}

module "prometheus-thanos-store" {
  source = "./modules/s3_bucket"

  name               = "thanos-store"
  prefix_pttp        = module.label_mojo.id
  tags               = module.label_mojo.tags
  encryption_enabled = true
  is_production      = var.is-production
  kms_key_arn        = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id         = aws_kms_key.s3_encryption_kms_key.key_id
  target_bucket      = module.s3_access_logging.bucket_name

  providers = {
    aws = aws.env
  }

  depends_on = [aws_kms_key.s3_encryption_kms_key]
}

module "s3_access_logging" {
  source = "./modules/s3_bucket"

  name              = "s3-access-logging"
  prefix_pttp       = module.label_pttp.id
  tags              = module.label_pttp.tags
  acl               = "log-delivery-write"
  versioning_status = "Suspended"
  is_production     = var.is-production
  kms_key_arn       = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id        = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "snmp_exporter_lb_access_logging" {
  source = "./modules/s3_bucket"

  name                           = "snmp-exporter-lb-access-logging"
  prefix_pttp                    = module.label_pttp.id
  tags                           = module.label_pttp.tags
  versioning_status              = "Suspended"
  encryption_enabled             = false
  attach_elb_log_delivery_policy = true
  is_production                  = var.is-production
  kms_key_arn                    = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                     = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "vpc_flow_logging" {
  source = "./modules/s3_bucket"

  name              = "vpc-flow-logging"
  prefix_pttp       = module.label_pttp.id
  tags              = module.label_pttp.tags
  acl               = "log-delivery-write"
  versioning_status = "Suspended"
  is_production     = var.is-production
  kms_key_arn       = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id        = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "grafana_lb_access_logging_v2" {
  source = "./modules/s3_bucket"

  name                              = "grafana-lb-access-logging-v2"
  prefix_pttp                       = module.label_pttp.id
  tags                              = module.label_pttp.tags
  versioning_status                 = "Suspended"
  encryption_enabled                = false
  attach_elb_log_delivery_policy    = true
  is_production                     = var.is-production
  override_attach_mfa_delete_policy = true
  kms_key_arn                       = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                        = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "prometheus_lb_access_logging_v2" {
  source = "./modules/s3_bucket"

  name                              = "prometheus-lb-access-logging-v2"
  prefix_pttp                       = module.label_pttp.id
  tags                              = module.label_pttp.tags
  versioning_status                 = "Suspended"
  encryption_enabled                = false
  attach_elb_log_delivery_policy    = true
  is_production                     = var.is-production
  override_attach_mfa_delete_policy = true
  kms_key_arn                       = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                        = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "snmp_exporter_lb_access_logging_v2" {
  source = "./modules/s3_bucket"

  name                              = "snmp-exporter-lb-access-logging-v2"
  prefix_pttp                       = module.label_pttp.id
  tags                              = module.label_pttp.tags
  versioning_status                 = "Suspended"
  encryption_enabled                = false
  attach_elb_log_delivery_policy    = true
  is_production                     = var.is-production
  override_attach_mfa_delete_policy = true
  kms_key_arn                       = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                        = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}

module "blackbox_exporter_lb_access_logging_v2" {
  source = "./modules/s3_bucket"

  name                              = "blackbox-exporter-lb-access-logging-v2"
  prefix_pttp                       = module.label_pttp.id
  tags                              = module.label_pttp.tags
  versioning_status                 = "Suspended"
  encryption_enabled                = false
  attach_elb_log_delivery_policy    = true
  is_production                     = var.is-production
  override_attach_mfa_delete_policy = true
  kms_key_arn                       = aws_kms_key.s3_encryption_kms_key.arn
  kms_key_id                        = aws_kms_key.s3_encryption_kms_key.key_id

  providers = {
    aws = aws.env
  }
}