diff --git a/apigw-http-api-lambda-terraform/.gitignore b/apigw-http-api-lambda-terraform/.gitignore new file mode 100644 index 0000000000..e1c9d6254b --- /dev/null +++ b/apigw-http-api-lambda-terraform/.gitignore @@ -0,0 +1 @@ +src.zip diff --git a/apigw-http-api-lambda-terraform/main.tf b/apigw-http-api-lambda-terraform/main.tf index ae7c461576..d926efe088 100644 --- a/apigw-http-api-lambda-terraform/main.tf +++ b/apigw-http-api-lambda-terraform/main.tf @@ -2,7 +2,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = "~> 4.0.0" + version = "~> 6" } random = { source = "hashicorp/random" @@ -28,9 +28,13 @@ resource "aws_s3_bucket" "lambda_bucket" { force_destroy = true } -resource "aws_s3_bucket_acl" "private_bucket" { +resource "aws_s3_bucket_public_access_block" "lambda_bucket" { bucket = aws_s3_bucket.lambda_bucket.id - acl = "private" + + block_public_acls = true + block_public_policy = true + ignore_public_acls = true + restrict_public_buckets = true } data "archive_file" "lambda_zip" { @@ -171,4 +175,4 @@ resource "aws_lambda_permission" "api_gw" { principal = "apigateway.amazonaws.com" source_arn = "${aws_apigatewayv2_api.lambda.execution_arn}/*/*" -} \ No newline at end of file +}