CA-161 - Update S3 module to prevent installing aws provider 4.0 (#12)

* Adds *.tfvars and *.terraform.lock.hcl to gitignore file.

* Updates version file to prevent the installing provider version 4.0.

* Updates version file to prevent installing aws provider version 4.0.

* Adds tfsec ignore comment for AWS077 and AWS098.

* Updates ignore section.

Author: fvazquez-caylent

.gitignore

@@ -1,6 +1,10 @@
 # Local .terraform directories
 **/.terraform/*
 
+
+# Terraform module lock files
+*.terraform.lock.hcl
+
 # .tfstate files
 *.tfstate
 *.tfstate.*
@@ -37,3 +41,6 @@ terratest.tf.json
 
 # Ignore makefile
 ops-makefile
+
+# Ignore tfvars
+**/*.tfvars

CHANGELOG.md

@@ -1,5 +1,8 @@
 # Tamr S3 Module Repo
 
+## v1.1.1 - February 12th 2022
+* Updates version file to prevent the major upgrade to the AWS provider version 4.0.
+
 ## v1.1.0 - July 12nd 2021
 * Adds tags for IAM policies
 * Adds new variable `tags` to set tags for all resources

README.md

@@ -37,7 +37,7 @@ This modules creates:
 | Name | Version |
 |------|---------|
 | terraform | >= 0.13 |
-| aws | >= 3.36.0 |
+| aws | >= 3.36.0, < 4.0.0 |
 
 ## Providers
 

VERSION

@@ -1 +1 @@
-1.1.0
+1.1.1

modules/encrypted-bucket/main.tf

@@ -1,4 +1,5 @@
-resource "aws_s3_bucket" "new_bucket" { #tfsec:ignore:AWS002
+#tfsec:ignore:aws-s3-enable-bucket-logging tfsec:ignore:aws-s3-enable-versioning tfsec:ignore:aws-s3-specify-public-access-block
+resource "aws_s3_bucket" "new_bucket" {
   bucket = var.bucket_name
   acl    = "private"
 

versions.tf

@@ -1,6 +1,6 @@
 terraform {
   required_version = ">= 0.13"
   required_providers {
-    aws = ">= 3.36.0"
+    aws = ">= 3.36.0, < 4.0.0"
   }
 }