AWS Amazon S3 Bucket Analytics Configuration

aws_s3_bucket_analytics_configuration (Terraform)

The Bucket Analytics Configuration in Amazon S3 can be configured in Terraform with the resource name aws_s3_bucket_analytics_configuration. The following sections describe 4 examples of how to use the resource and its parameters.

Example Usage from GitHub

gilyas/infracost

resource "aws_s3_bucket_analytics_configuration" "bucketanalytics" {
  bucket = aws_s3_bucket.bucket1.bucket
  name   = "bucketanalytics"
}

resource "aws_s3_bucket" "bucket1_withUsage" {

cpodieu1/Hello-Word

resource "aws_s3_bucket_analytics_configuration" "example-filtered" {
  bucket = aws_s3_bucket.example.bucket
  name   = "ImportantBlueDocuments"

  filter {
    prefix = "documents/"

infracost/infracost

resource "aws_s3_bucket_analytics_configuration" "bucketanalytics" {
  bucket = aws_s3_bucket.bucket1.bucket
  name   = "bucketanalytics"
}

resource "aws_s3_bucket" "bucket1_withUsage" {

niveklabs/aws

resource "aws_s3_bucket_analytics_configuration" "this" {
  bucket = var.bucket
  name   = var.name

  dynamic "filter" {
    for_each = var.filter

Parameters

• bucket required - string
• id optional computed - string
• name required - string
• filter list block
  • prefix optional - string
  • tags optional - map from string to string
• storage_class_analysis list block
  • data_export list block
    • output_schema_version optional - string
    • destination list block
      • s3_bucket_destination list block
        • bucket_account_id optional - string
        • bucket_arn required - string
        • format optional - string
        • prefix optional - string

Explanation in Terraform Registry

Provides a S3 bucket analytics configuration resource.

Tips: Best Practices for The Other AWS Amazon S3 Resources

In addition to the aws_s3_bucket_public_access_block, AWS Amazon S3 has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

aws_s3_bucket_public_access_block

Ensure S3 bucket-level Public Access Block restricts public bucket policies

It is better to enable S3 bucket-level Public Access Block if you don't need public buckets.

aws_s3_bucket

Ensure S3 bucket access policy is well configured

It is better to configure the S3 bucket access policy properly to limit it unless explicitly required.