This module creates a secure S3 bucket with comprehensive security controls and optional supporting resources.

• Configurable KMS encryption
• Optional logging bucket creation
• CloudWatch logs integration
• Intelligent tiering support
• Flexible lifecycle rules
• Comprehensive security controls implementing CCC standards

Basic usage:

module "secure_s3" {
  source = "git::https://github.com/org/terraform-aws-secure-s3.git?ref=v1.0.0"
  
  prefix      = "prod"
  bucket_name = "my-application-data"
  
  tags = {
    Environment = "Production"
    Owner       = "Platform Team"
  }
}

This module creates the following resources:

• S3 Bucket with security configurations
• Optional KMS Key for encryption
• Optional S3 Bucket for access logging
• Optional CloudWatch Log Group
• Associated IAM policies and bucket policies

See variables.tf for detailed descriptions of all input variables.

See outputs.tf for detailed descriptions of all outputs.

This module implements the following security controls:

• CCC.C01: Prevent unencrypted requests
• CCC.C02: Ensure data encryption at rest
• [List continues...]

Please see CONTRIBUTING.md for guidelines.

Apache 2.0 Licensed. See LICENSE for full details.