This Terraform module provides an efficient, repeatable way to create S3 buckets via Terraform that meet Well standards and best practices requirements:

• KMS Encryption: can use either a specified key or the default AWS S3 key
• Logging of S3 activity
• Tags: Optional tags that will be added to the bucket (mandatory tags are automatically included)
• Versioning on bucket objects: Versioning is required and included by default

module "s3bucket-required-only" {
    source = "../well.terraform.module.s3bucket"
    bucket_name = "required-only"
    owning_team = "MyTeam"
}

resource "aws_kms_key" "kms_s3_myteam" {
  description             = "KMS key for the MyTeam all-params S3 bucket"
}

module "s3bucket-all-params" {
    source = "../well.terraform.module.s3bucket"
    bucket_name = "all-params"
    owning_team = "MyTeam"
    kms_key_arn = aws_kms_key.kms_s3_myteam.arn
    tags = {
        ProductName = "MyTeamApp"
        ProductVersion = "1.2.3"
    }
}

• resource.aws_s3_bucket.s3_b (main.tf#13)
• resource.aws_s3_bucket_server_side_encryption_configuration.s3_sse (main.tf#28)
• resource.aws_s3_bucket_versioning.s3_bv (main.tf#21)