使用 Terraform 通过复制设置 s3 存储桶

Question

我正在尝试使用 Terraform 配置带有复制的 s3 存储桶。我收到以下错误。

Error: insufficient items for attribute "destination"; must have at least 1
      on main.tf line 114, in resource "aws_s3_bucket" "ps-db-backups":
     114:   lifecycle_rule {

我不明白这个错误消息。首先，在replication部分中，我destination定义。其次，错误消息提到了没有lifecycle_rule destination属性。存储桶定义如下。

resource "aws_s3_bucket" "ps-db-backups" {
  bucket = "ps-db-backups-b3bd1643-8cbf-4927-a64a-f0cf9b58dfab"
  acl    = "private"
  region = "eu-west-1"
  versioning {
    enabled = true
  }
  lifecycle_rule {
    id      = "transition"
    enabled = true
    transition {
      days          = 30
      storage_class = "STANDARD_IA"
    }
    expiration {
      days = 180
    }
  }
replication_configuration {
    role = "${aws_iam_role.ps-db-backups-replication.arn}"
    rules {
      id     = "ps-db-backups-replication"
      status = "Enabled"
      destination {
        bucket        = "${aws_s3_bucket.ps-db-backups-replica.arn}"
        storage_class = "STANDARD_IA"
      }
    }
  }
server_side_encryption_configuration {
    rule {
      apply_server_side_encryption_by_default {
        sse_algorithm     = "AES256"
      }
    }
  }
}

Answer 1

仔细浏览地形文档。

您需要为destination创建一个单独的地形资源，如下所示：

resource "aws_s3_bucket" "destination" {
  bucket = "tf-test-bucket-destination-12345"
  region = "eu-west-1"
  versioning {
    enabled = true
  }
}

然后在您的replication_configuration中将其称为

destination {
  bucket        = "${aws_s3_bucket.destination.arn}"
  storage_class = "STANDARD"
}

我希望这有所帮助。试着让我知道。

Answer 2

这似乎是 Terraform 0.12 中的一个错误。请参阅此问题 https://github.com/terraform-providers/terraform-provider-aws/issues/9048

Answer 3

作为旁注，如果您还需要启用 S3 复制的监控，您将无法这样做。Terraform没有实现这一点。

但是有一个 PR 为此开放，请竖起大拇指投票，https://github.com/terraform-providers/terraform-provider-aws/pull/11337