terraform/ecc-aws-043-s3_bucket_lifecycle/red2/s3.tf

resource "aws_s3_bucket" "this" {
  bucket        = "043-bucket-${random_integer.this.result}-red2"
  force_destroy = "true"
}

resource "random_integer" "this" {
  min = 1
  max = 10000000
}

resource "aws_s3_bucket_ownership_controls" "this" {
  bucket = aws_s3_bucket.this.id
  rule {
    object_ownership = "BucketOwnerPreferred"
  }
}

resource "aws_s3_bucket_acl" "this" {
  depends_on = [aws_s3_bucket_ownership_controls.this]

  bucket = aws_s3_bucket.this.id
  acl    = "private"
}

resource "aws_s3_bucket_lifecycle_configuration" "this" {
  bucket = aws_s3_bucket.this.bucket
  
  rule {
    id = "log"

    expiration {
      days = 90
    }

    filter {
      and {
        prefix = "log/"
		
		tags = {
          CustodianRule    = "ecc-aws-043-s3_bucket_lifecycle"
          ComplianceStatus = "Red2"
        }
      }
    }

    status = "Disabled"

    transition {
      days          = 60
      storage_class = "GLACIER"
    }
  }
}