Skip to main content
Sponsor @cloudposse

Module: config-storage

This module creates an S3 bucket suitable for storing AWS Config data.

It implements a configurable log retention policy, which allows you to efficiently manage logs across different storage classes (e.g. Glacier) and ultimately expire the data altogether.

It enables server-side default encryption. https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html

It blocks public access to the bucket by default. https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html

Usage​

Here's how to invoke this example module in your projects

module "aws_config_storage" {
  source = "cloudposse/config-storage/aws"
  # Cloud Posse recommends pinning every module to a specific version
  # version     = "x.x.x"
  name                     = "aws-config"
  stage                    = "test"
  namespace                = "eg"
  standard_transition_days = 30
  glacier_transition_days  = 60
}

Examples​

Here is an example of using this module: