main.tf

module "labels" {
  source  = "cloudposse/label/null"
  version = "0.25.0"

  namespace = var.namespace
  stage     = var.stage
  name      = var.name
  tags      = var.tags
}

module "kms" {
  source                 = "./modules/kms"
  namespace              = var.namespace
  stage                  = var.stage
  name                   = var.name
  tags                   = var.tags
  description            = "${module.labels.id}-${var.bucket_suffix}-CMK"
  key_alias              = "${module.labels.id}-${var.bucket_suffix}-CMK"
  enable_key_rotation    = "true"
  admin_role_arns        = var.kms_admin_role_arns
  user_role_arns         = var.kms_user_role_arns
  admin_services         = var.kms_admin_services
  user_services          = var.kms_user_services
  kms_policy_source_json = var.kms_policy_source_json
}

module "s3" {
  source                                = "./modules/s3"
  namespace                             = var.namespace
  stage                                 = var.stage
  name                                  = var.name
  tags                                  = var.tags
  bucket_name                           = var.bucket_suffix
  kms_key_arn                           = module.kms.key_arn
  use_bucket_suffix_as_name             = var.use_bucket_suffix_as_name
  enforce_server_side_encryption_header = var.enforce_server_side_encryption_header
  bucket_policy_source_json             = var.bucket_policy_source_json
  bucket_key_enabled                    = var.bucket_key_enabled
  lifecycle_rule                        = var.lifecycle_rule
  bucket_versioning                     = var.bucket_versioning
  log_expiration_days                   = var.log_expiration_days
  should_force_destroy                  = var.should_force_destroy
}

module "s3-iam-roles" {
  source      = "./modules/s3-iam"
  bucket_name = module.s3.bucket_name
  kms_key_arn = module.kms.key_arn
}