main.tf

resource "aws_s3_bucket" "this" {
  bucket        = var.bucket_name
  region        = var.region
  acl           = var.acl
  force_destroy = var.force_destroy

  versioning {
    enabled    = var.versioning_enabled ? true : false
    mfa_delete = var.versioning_mfa_delete ? true : false
  }

  server_side_encryption_configuration {
    rule {
      apply_server_side_encryption_by_default {
        sse_algorithm = var.sse_algorithm
      }
    }
  }

  tags = var.tags
}

data "template_file" "this" {
  template = file(var.policy_path)
  vars = {
    account_id  = var.account_id
    bucket_name = var.bucket_name
  }
}

resource "aws_s3_bucket_policy" "this" {
  bucket = aws_s3_bucket.this.id
  policy = data.template_file.this.rendered
  #policy = var.policy
}

# Fix the issue with aws_s3_bucket_public_access_block creation
resource "null_resource" "delay" {
  depends_on = [aws_s3_bucket.this]

  provisioner "local-exec" {
    command = "sleep 5"
  }
}

resource "aws_s3_bucket_public_access_block" "this" {
  bucket                  = aws_s3_bucket.this.id
  block_public_acls       = var.block_public_acls
  block_public_policy     = var.block_public_policy
  ignore_public_acls      = var.ignore_public_acls
  restrict_public_buckets = var.restrict_public_buckets

  depends_on = [null_resource.delay]
}

resource "aws_s3_bucket_object" "this" {
  count  = length(var.keys) == 0 ? 0 : length(var.keys)
  bucket = aws_s3_bucket.this.id
  key    = var.keys[count.index]
  source = "/dev/null"
}