Merge pull request #1 from QuiNovas/develop

First checkin

.gitignore

@@ -0,0 +1,2 @@
+.idea/
+*.iml

README.md

@@ -0,0 +1,11 @@
+# terraform-aws-lambda-functions-bucket
+
+This module creates a bucket for log storage, including from other S3 buckets
+
+## Authors
+
+Module managed by Quinovas (https://github.com/QuiNovas)
+
+## License
+
+Apache License, Version 2.0, January 2004 (http://www.apache.org/licenses/). See LICENSE for full details.

main.tf

@@ -0,0 +1,72 @@
+resource "aws_s3_bucket" "log" {
+  bucket  = "${var.name_prefix}-log"
+  acl     = "log-delivery-write"
+  lifecycle {
+    prevent_destroy = true
+  }
+  lifecycle_rule {
+    id      = "log"
+    prefix  = "/"
+    enabled = true
+
+    transition {
+      days = 30
+      storage_class = "GLACIER"
+    }
+
+    expiration {
+      days = 2555
+    }
+  }
+}
+
+data "aws_elb_service_account" "main" {}
+
+data "aws_iam_policy_document" "log" {
+
+  statement {
+    actions   = [
+      "s3:PutObject"
+    ]
+    principals {
+      identifiers = [
+        "${data.aws_elb_service_account.main.arn}"
+      ]
+      type = "AWS"
+    }
+    resources = [
+      "${aws_s3_bucket.log.arn}/elb/*"
+    ]
+    sid       = "EnableELBLogging"
+  }
+
+  statement {
+    actions = [
+      "s3:*"
+    ]
+    condition {
+      test = "Bool"
+      values = [
+        "false"
+      ]
+      variable = "aws:SecureTransport"
+    }
+    effect = "Deny"
+    principals {
+      identifiers = [
+        "*"
+      ]
+      type = "AWS"
+    }
+    resources = [
+      "${aws_s3_bucket.log.arn}",
+      "${aws_s3_bucket.log.arn}/*"
+    ]
+    sid = "DenyUnsecuredTransport"
+  }
+}
+
+resource "aws_s3_bucket_policy" "log" {
+  bucket = "${aws_s3_bucket.log.id}"
+  policy = "${data.aws_iam_policy_document.log.json}"
+}

outputs.tf

@@ -0,0 +1,9 @@
+output "arn" {
+  description = "The ARN of the bucket. Will be of format arn:aws:s3:::bucketname."
+  value       = "${aws_s3_bucket.log.arn}"
+}
+
+output "id" {
+  description = "The name of the bucket."
+  value       = "${aws_s3_bucket.log.id}"
+}

variables.tf

@@ -0,0 +1,4 @@
+variable "name_prefix" {
+  description = "The name prefix to use when creating resource names"
+  type        = "string"
+}