cloudposse/s3-bucket
Terraform module that creates an S3 bucket with an optional IAM user for external CI/CD systems.
About
Terraform module that creates an S3 bucket with an optional IAM user for external CI/CD systems.
Maintained by cloudposse on the Terraform Registry. Latest version 4.15.0, 22.8M downloads. Requires providers: aws.
Deploy creates a StackGuardian workflow from the module's GitHub repository, pinned to this version. You set the inputs, see the plan, then approve the apply.
Use cases
- Buckets or volumes with encryption, versioning and lifecycle rules enforced by policy.
- Artifact, log and backup storage created per environment.
- Static sites or data lakes with access limited to named principals.
Inputs
No required inputs. Every variable has a default, so the first run works with an empty input form.
68 inputs in total. The full list, with defaults and descriptions, is on the registry page.
What it creates
aws_s3_bucketaws_s3_bucket_policyaws_s3_bucket_versioningaws_s3_bucket_server_side_encryption_configurationaws_s3_bucket_public_access_blockaws_s3_bucket_lifecycle_configuration
How it runs on StackGuardian
Terraform workflow from the module's GitHub repository: plan, policy check, approval, then apply.
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.