initial code

Author: nhsdevws

terraform/redis_sync_lambda.tf

@@ -254,7 +254,7 @@ resource "aws_cloudwatch_log_group" "redis_sync_log_group" {
 # S3 Bucket notification to trigger Lambda function for config bucket
 resource "aws_s3_bucket_notification" "config_lambda_notification" {
   # For now, only create a trigger in internal-dev and prod as those are the envs with a config bucket
-  count = local.create_config_bucket ? 1 : 0
+  # count = local.create_config_bucket ? 1 : 0
 
   bucket = aws_s3_bucket.batch_config_bucket[0].bucket
 
@@ -266,7 +266,7 @@ resource "aws_s3_bucket_notification" "config_lambda_notification" {
 
 # Permission for the new S3 bucket to invoke the Lambda function
 resource "aws_lambda_permission" "new_s3_invoke_permission" {
-  count = local.create_config_bucket ? 1 : 0
+  # count = local.create_config_bucket ? 1 : 0
 
   statement_id  = "AllowExecutionFromNewS3"
   action        = "lambda:InvokeFunction"

terraform/s3_config.tf

@@ -193,13 +193,13 @@ resource "aws_s3_bucket_lifecycle_configuration" "data_destinations" {
 
 resource "aws_s3_bucket" "batch_config_bucket" {
   # For now, only create in internal-dev and prod as we only have one shared Redis instance per account.
-  count = local.create_config_bucket ? 1 : 0
+  # count = local.create_config_bucket ? 1 : 0
 
   bucket = "imms-${local.environment}-supplier-config"
 }
 
 resource "aws_s3_bucket_public_access_block" "batch_config_bucket_public_access_block" {
-  count = local.create_config_bucket ? 1 : 0
+  # count = local.create_config_bucket ? 1 : 0
 
   bucket = aws_s3_bucket.batch_config_bucket[0].id
 
@@ -210,7 +210,7 @@ resource "aws_s3_bucket_public_access_block" "batch_config_bucket_public_access_
 }
 
 resource "aws_s3_bucket_policy" "batch_config_bucket_policy" {
-  count = local.create_config_bucket ? 1 : 0
+  # count = local.create_config_bucket ? 1 : 0
 
   bucket = aws_s3_bucket.batch_config_bucket[0].id
 

terraform/variables.tf

@@ -28,9 +28,13 @@ locals {
   service_domain_name = "${local.env}.${local.project_domain_name}"
 
   # For now, only create the config bucket in internal-dev and prod as we only have one Redis instance per account.
-  create_config_bucket = local.environment == local.config_bucket_env
-  config_bucket_arn    = local.create_config_bucket ? aws_s3_bucket.batch_config_bucket[0].arn : data.aws_s3_bucket.existing_config_bucket[0].arn
-  config_bucket_name   = local.create_config_bucket ? aws_s3_bucket.batch_config_bucket[0].bucket : data.aws_s3_bucket.existing_config_bucket[0].bucket
+  # create_config_bucket = local.environment == local.config_bucket_env
+  # config_bucket_arn    = local.create_config_bucket ? aws_s3_bucket.batch_config_bucket[0].arn : data.aws_s3_bucket.existing_config_bucket[0].arn
+  # config_bucket_name   = local.create_config_bucket ? aws_s3_bucket.batch_config_bucket[0].bucket : data.aws_s3_bucket.existing_config_bucket[0].bucket
+
+  config_bucket_arn    = aws_s3_bucket.batch_config_bucket[0].arn
+  config_bucket_name   = aws_s3_bucket.batch_config_bucket[0].bucket
+
 
   # Public subnet - The subnet has a direct route to an internet gateway. Resources in a public subnet can access the public internet.
   # public_subnet_ids = [for k, v in data.aws_route.internet_traffic_route_by_subnet : k if length(v.gateway_id) > 0]