client_bucket.tf

resource "aws_s3_bucket" "client_bucket" {
  bucket = sha1(format("my_super_secret_key:%s", var.client.name))
  region = var.client.region
  acl = "private"

  server_side_encryption_configuration {
    rule {
      apply_server_side_encryption_by_default {
        sse_algorithm = "AES256"
      }
    }
  }
}