Jon Chery
0ca383dae6
Create run_codegen.sh (pre-TF: env check, validate, resolve, adapt). Create run_postapply.sh (post-TF: Checkov, confidence, HITL, outbox, SSM, uptime). Add variable 'enabled' (bool, default true) + count=var.enabled?1:0 to all 12 L1 modules (alb, cloudfront, ecr, ecs-cluster, ecs-service, iam-role, kms-key, rds, s3, uptime, vpc, waf). Fix all cross-resource references with [0] indexing. Update interface.json for all modules to declare 'enabled' input. Fix stale artifact path /tmp/acdl_platform_run_v18 → /tmp/nova_platform_run (REQ-238). run_platform.sh remains as backward-compat shim for local-dev usage. ---ci--- project: acdl phase: 4 milestone: v1.20 status: execute requirements: [REQ-233, REQ-234, REQ-235, REQ-236, REQ-237, REQ-238] ---/ci---
26 lines
579 B
Terraform
26 lines
579 B
Terraform
resource "aws_s3_bucket" "this" {
|
|
count = var.enabled ? 1 : 0
|
|
bucket = var.bucket_name
|
|
tags = local.tags
|
|
}
|
|
|
|
resource "aws_s3_bucket_versioning" "this" {
|
|
count = var.enabled ? 1 : 0
|
|
bucket = aws_s3_bucket.this[0].id
|
|
|
|
versioning_configuration {
|
|
status = "Enabled"
|
|
}
|
|
}
|
|
|
|
resource "aws_s3_bucket_server_side_encryption_configuration" "this" {
|
|
count = var.enabled ? 1 : 0
|
|
bucket = aws_s3_bucket.this[0].id
|
|
|
|
rule {
|
|
apply_server_side_encryption_by_default {
|
|
sse_algorithm = local.sse_algorithm
|
|
kms_master_key_id = var.kms_key_arn
|
|
}
|
|
}
|
|
} |