Make bucket not public

skrepr · Mar 20, 2023 · 99b23c6 · 99b23c6
1 parent b80ed63
commit 99b23c6
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/tasks/s3.yml b/tasks/s3.yml
@@ -34,6 +34,12 @@
     state: present
     policy_json: "{{ lookup('template', 'policy.json.j2') }}"
     profile: "{{ aws_profile }}"
+    public_access:
+      block_public_acls: true
+      ignore_public_acls: true
+      block_public_policy: true
+      restrict_public_buckets: true
+
   delegate_to: localhost
   become: false
   vars: