cloudposse/terraform-aws-tfstate-backend 1.1.1

v1.1.1

on GitHub

what

• added tfsec ignores to false positives

why

• the terraform aws_s3_bucket resource was updated some time ago to deprecate access policies, encryption and logging as arguments, instead preferring separate terraform resources. tfsec incorrectly highlights the aws_s3_bucket resource are CRITICALly vulnerable.

references

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#argument-reference

Rebuild github dir from the template

what

• Always require TLS connection to S3 bucket

why

• Restores intended behavior
• Fixes crash. Supersedes and closes #135. Thank you @dod38fr