[PLT-890] add legacy variable to tfstate service and create backends

terraform/backends/ab2d-dev-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "ab2d-dev-tfstate"
+dynamodb_table = "ab2d-dev-tfstate"

terraform/backends/ab2d-mgmt-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "ab2d-mgmt-tfstate-20250409210420915900000001"
+dynamodb_table = "ab2d-mgmt-tfstate"

terraform/backends/ab2d-prod-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "ab2d-prod-tfstate-20250409213006186000000001"
+dynamodb_table = "ab2d-prod-tfstate"

terraform/backends/ab2d-sbx-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "ab2d-sbx-tfstate-20250410133938105200000001"
+dynamodb_table = "ab2d-sbx-tfstate"

terraform/backends/ab2d-test-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "ab2d-test-tfstate-20250410134820763500000001"
+dynamodb_table = "ab2d-test-tfstate"

terraform/backends/bcda-dev-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "bcda-dev-tfstate-20250409202710600700000001"
+dynamodb_table = "bcda-dev-tfstate"

terraform/backends/bcda-mgmt-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "bcda-mgmt-tfstate-20250410135348899400000001"
+dynamodb_table = "bcda-mgmt-tfstate"

terraform/backends/bcda-prod-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "bcda-prod-tfstate-20250410135924284000000001"
+dynamodb_table = "bcda-prod-tfstate"

terraform/backends/bcda-sbx-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "bcda-sbx-tfstate-20250410142904110700000001"
+dynamodb_table = "bcda-sbx-tfstate"

terraform/backends/bcda-test-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "bcda-test-tfstate-20250409171646342600000001"
+dynamodb_table = "bcda-test-tfstate"

terraform/backends/dpc-dev-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "dpc-dev-tfstate-20250409165915907400000001"
+dynamodb_table = "dpc-dev-tfstate"

terraform/backends/dpc-mgmt-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "dpc-mgmt-tfstate-20250410143603238400000001"
+dynamodb_table = "dpc-mgmt-tfstate"

terraform/backends/dpc-prod-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "dpc-prod-tfstate-20250410144446474100000001"
+dynamodb_table = "dpc-prod-tfstate"

terraform/backends/dpc-sbx-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "dpc-sbx-tfstate-20250410145025265200000001"
+dynamodb_table = "dpc-sbx-tfstate"

terraform/backends/dpc-test-gf.s3.tfbackend

@@ -0,0 +1,2 @@
+bucket         = "dpc-test-tfstate-20250410145524530000000001"
+dynamodb_table = "dpc-test-tfstate"

terraform/modules/bucket/main.tf

@@ -9,7 +9,7 @@ module "bucket_key" {
 
 resource "aws_s3_bucket" "this" {
   bucket        = var.legacy == true ? var.name : null
-  bucket_prefix = var.legacy == false ? var.name : null
+  bucket_prefix = var.legacy == false ? "${var.name}-" : null
   force_destroy = true
 }
 
@@ -88,9 +88,15 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "this" {
     }
   }
 }
+
+data "aws_iam_account_alias" "current" {}
+
 data "aws_s3_bucket" "bucket_access_logs" {
-  bucket = "${data.aws_caller_identity.current.account_id}-bucket-access-logs"
+  bucket = (var.legacy == true ? "${data.aws_caller_identity.current.account_id}-bucket-access-logs" :
+    data.aws_iam_account_alias.current.account_alias == "aws-cms-oeda-bcda-non-prod" ? "bucket-access-logs-20250409172631068600000001" :
+      "bucket-access-logs-tbd")
 }
+
 resource "aws_s3_bucket_logging" "this" {
   bucket = aws_s3_bucket.this.id
 

terraform/services/bucket-access-logs/main.tf

@@ -1,7 +1,8 @@
 data "aws_caller_identity" "current" {}
 
 resource "aws_s3_bucket" "bucket_access_logs" {
-  bucket        = "${data.aws_caller_identity.current.account_id}-bucket-access-logs"
+  bucket        = var.legacy == true ? "${data.aws_caller_identity.current.account_id}-bucket-access-logs" : null
+  bucket_prefix = var.legacy == false ? "bucket-access-logs-" : null
   force_destroy = true
 }
 

terraform/services/bucket-access-logs/variables.tf

@@ -0,0 +1,5 @@
+variable "legacy" {
+  description = "Is this deployment in the greenfield environment (false)?"
+  type        = bool
+  default     = true
+}