refactor: missing SSL setting leaked in the bucket

aws-samples · May 10, 2022 · a7e24b2 · a7e24b2
1 parent 964f958
commit a7e24b2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/usecases/base-standalone/lib/blea-config-stack.ts b/usecases/base-standalone/lib/blea-config-stack.ts
@@ -27,6 +27,7 @@ export class BLEAConfigStack extends cdk.Stack {
       versioned: true,
       removalPolicy: cdk.RemovalPolicy.RETAIN,
       encryption: s3.BucketEncryption.S3_MANAGED,
+      enforceSSL: true,
     });
 
     // Attaches the AWSConfigBucketPermissionsCheck policy statement.

diff --git a/usecases/guest-webapp-sample/lib/blea-vpc-stack.ts b/usecases/guest-webapp-sample/lib/blea-vpc-stack.ts
@@ -63,6 +63,7 @@ export class BLEAVpcStack extends cdk.Stack {
       encryption: s3.BucketEncryption.KMS,
       blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL,
       removalPolicy: cdk.RemovalPolicy.RETAIN,
+      enforceSSL: true,
     });
 
     myVpc.addFlowLog('FlowLogs', {