Merge pull request #6 from rhythmictech/NOC-13028

NOC-13028
rhythmictech · Jun 4, 2021 · e2f9ee1 · e2f9ee1
2 parents 965bf71 + 17bccdb
commit e2f9ee1
Showing 1 changed file with 0 additions and 36 deletions.
diff --git a/main.tf b/main.tf
@@ -61,42 +61,6 @@ resource "aws_s3_bucket_public_access_block" "this" {
 }
 
 data "aws_iam_policy_document" "this" {
-  statement {
-    sid       = "DenyIncorrectEncryptionHeader"
-    actions   = ["s3:PutObject*"]
-    effect    = "Deny"
-    resources = ["${aws_s3_bucket.this.arn}/*"]
-
-    condition {
-      test     = "StringNotEquals"
-      variable = "s3:x-amz-server-side-encryption"
-      values   = ["AES256"]
-    }
-
-    principals {
-      identifiers = ["*"]
-      type        = "AWS"
-    }
-  }
-
-  statement {
-    sid       = "DenyUnEncryptedObjectUploads"
-    actions   = ["s3:PutObject*"]
-    effect    = "Deny"
-    resources = ["${aws_s3_bucket.this.arn}/*"]
-
-    condition {
-      test     = "Null"
-      variable = "s3:x-amz-server-side-encryption"
-      values   = [true]
-    }
-
-    principals {
-      identifiers = ["*"]
-      type        = "AWS"
-    }
-  }
-
   dynamic "statement" {
     for_each = var.allowed_account_ids