diff --git a/modules/statics-deploy/main.tf b/modules/statics-deploy/main.tf index a9171ba1..1c492db9 100644 --- a/modules/statics-deploy/main.tf +++ b/modules/statics-deploy/main.tf @@ -14,9 +14,18 @@ resource "aws_s3_bucket" "static_upload" { tags = merge(var.tags, var.tags_s3_bucket) } -resource "aws_s3_bucket_acl" "static_upload" { +resource "aws_s3_bucket_ownership_controls" "static_upload" { bucket = aws_s3_bucket.static_upload.id - acl = "private" + rule { + object_ownership = "BucketOwnerPreferred" + + } +} + +resource "aws_s3_bucket_acl" "static_upload" { + depends_on = [aws_s3_bucket_ownership_controls.static_upload] + bucket = aws_s3_bucket.static_upload.id + acl = "private" } resource "aws_s3_bucket_notification" "on_create" { @@ -39,9 +48,17 @@ resource "aws_s3_bucket" "static_deploy" { tags = merge(var.tags, var.tags_s3_bucket) } -resource "aws_s3_bucket_acl" "static_deploy" { +resource "aws_s3_bucket_ownership_controls" "static_deploy" { bucket = aws_s3_bucket.static_deploy.id - acl = "private" + rule { + object_ownership = "BucketOwnerPreferred" + } +} + +resource "aws_s3_bucket_acl" "static_deploy" { + depends_on = [aws_s3_bucket_ownership_controls.static_deploy] + bucket = aws_s3_bucket.static_deploy.id + acl = "private" } # CloudFront permissions for the bucket