add intelligent tiering lifecycle policy (#2512)

Author: timburke-hackit

terraform/core/10-aws-s3-buckets.tf

@@ -48,6 +48,7 @@ module "landing_zone" {
   expired_object_delete_marker   = true
   expire_noncurrent_objects_days = 30
   abort_multipart_days           = 30
+  enable_intelligent_tiering     = true
 }
 
 module "raw_zone" {
@@ -77,6 +78,7 @@ module "raw_zone" {
     ] : []
   )
   include_backup_policy_tags = false
+  enable_intelligent_tiering = true
 }
 
 module "refined_zone" {
@@ -105,6 +107,7 @@ module "refined_zone" {
     ] : []
   )
   include_backup_policy_tags = false
+  enable_intelligent_tiering = true
 }
 
 module "trusted_zone" {
@@ -127,4 +130,5 @@ module "trusted_zone" {
     ] : []
   )
   include_backup_policy_tags = false
+  enable_intelligent_tiering = true
 }

terraform/modules/s3-bucket/02-inputs-optional.tf

@@ -162,3 +162,15 @@ variable "expired_object_delete_marker" {
   type        = bool
   default     = false
 }
+
+variable "enable_intelligent_tiering" {
+  description = "Whether to enable S3 Intelligent Tiering for the bucket"
+  type        = bool
+  default     = false
+}
+
+variable "intelligent_tiering_days" {
+  description = "Number of days after which to transition objects to Intelligent Tiering. Set to 0 for immediate transition."
+  type        = number
+  default     = 0
+}

terraform/modules/s3-bucket/10-s3-bucket.tf

@@ -171,7 +171,8 @@ resource "aws_s3_bucket_lifecycle_configuration" "bucket" {
     var.expire_objects_days != null ||
     var.expire_noncurrent_objects_days != null ||
     var.abort_multipart_days != null ||
-    var.expired_object_delete_marker
+    var.expired_object_delete_marker ||
+    var.enable_intelligent_tiering
   ) ? 1 : 0
   bucket = aws_s3_bucket.bucket.id
 
@@ -242,6 +243,22 @@ resource "aws_s3_bucket_lifecycle_configuration" "bucket" {
       }
     }
   }
+
+  # Rule for s3 intelligent tiering
+  dynamic "rule" {
+    for_each = var.enable_intelligent_tiering ? [1] : []
+    content {
+      id     = "intelligent-tiering"
+      status = "Enabled"
+
+      filter {}
+
+      transition {
+        days          = var.intelligent_tiering_days
+        storage_class = "INTELLIGENT_TIERING"
+      }
+    }
+  }
 }
 
 resource "aws_s3_bucket_public_access_block" "block_public_access" {