Terraform template to create a secure s3 bucket, dnamodb for state file

terraform-statefile-bucket.tf

provider "aws" {
    region = "eu-west-2"
    profile = "xxx"
}

variable "env" {
    description = "Name of AWS environment"
    type = string
    default = "xxx"
}

resource "aws_s3_bucket" "terraform_state" {
    bucket = "${var.env}-statefile"

    # Enable versioning
    versioning {
        enabled = true
    }

    #Enable Server Side Encryption by default
    server_side_encryption_configuration {
        rule {
            apply_server_side_encryption_by_default {
                sse_algorithm = "AES256"
            }
        }
    }

}

# Block ALL public access to statefile bucket
resource "aws_s3_bucket_public_access_block" "terraform_state" {
  bucket = aws_s3_bucket.terraform_state.id

  block_public_acls         = true
  block_public_policy       = true
  ignore_public_acls        = true
  restrict_public_buckets   = true
}