fix resource creation when eks_audit_logs_pipeline is disabled (#4)

rad-security · Aug 9, 2024 · b968480 · b968480
1 parent eac59c8
commit b968480
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/eks_audit_logs.tf b/eks_audit_logs.tf
@@ -37,6 +37,7 @@ resource "aws_s3_bucket" "audit_logs" {
 }
 
 resource "aws_s3_bucket_public_access_block" "audit_logs" {
+  count  = var.enable_eks_audit_logs_pipeline ? 1 : 0
   bucket = aws_s3_bucket.audit_logs[0].id
 
   block_public_acls       = true
@@ -46,6 +47,7 @@ resource "aws_s3_bucket_public_access_block" "audit_logs" {
 }
 
 resource "aws_s3_bucket_server_side_encryption_configuration" "audit_logs" {
+  count  = var.enable_eks_audit_logs_pipeline ? 1 : 0
   bucket = aws_s3_bucket.audit_logs[0].id
   rule {
     apply_server_side_encryption_by_default {