devops-arch-cloud
diff --git a/‎apigw-http-api-lambda-terraform/main.tf‎
Lines changed: 6 additions & 2 deletions b/‎apigw-http-api-lambda-terraform/main.tf‎
Lines changed: 6 additions & 2 deletions
diff --git a/‎apigw-http-api-lambda-terraform/src.zip‎
-730 Bytes b/‎apigw-http-api-lambda-terraform/src.zip‎
-730 Bytes
@@ -28,9 +28,13 @@ resource "aws_s3_bucket" "lambda_bucket" {
   force_destroy = true
 }
 
-resource "aws_s3_bucket_acl" "private_bucket" {
+resource "aws_s3_bucket_public_access_block" "lambda_bucket" {
   bucket = aws_s3_bucket.lambda_bucket.id
-  acl    = "private"
+
+  block_public_acls       = true
+  block_public_policy     = true
+  ignore_public_acls      = true
+  restrict_public_buckets = true
 }
 
 data "archive_file" "lambda_zip" {
Original file line number	Diff line number	Diff line change
`@@ -28,9 +28,13 @@ resource "aws_s3_bucket" "lambda_bucket" {`
`28`	`28`	`force_destroy = true`
`29`	`29`	`}`
`30`	`30`
`31`		`-resource "aws_s3_bucket_acl" "private_bucket" {`
	`31`	`+resource "aws_s3_bucket_public_access_block" "lambda_bucket" {`
`32`	`32`	`bucket = aws_s3_bucket.lambda_bucket.id`
`33`		`- acl = "private"`
	`33`	`+`
	`34`	`+ block_public_acls = true`
	`35`	`+ block_public_policy = true`
	`36`	`+ ignore_public_acls = true`
	`37`	`+ restrict_public_buckets = true`
`34`	`38`	`}`
`35`	`39`
`36`	`40`	`data "archive_file" "lambda_zip" {`