backend.tf: State file configuration

1 files changed, 25 insertions, 0 deletions

diff --git a/astroshop-terraform/backend.tf b/astroshop-terraform/backend.tf
new file mode 100644
index 0000000..10553ae
--- /dev/null
+++ b/astroshop-terraform/backend.tf
@@ -0,0 +1,25 @@
+resource "aws_s3_bucket" "terraform_state" {
+  bucket = "astroshop-terraform-state"
+
+  lifecycle {
+    prevent_destroy = true
+  }
+}
+
+resource "aws_s3_bucket_versioning" "terraform_state" {
+  bucket = aws_s3_bucket.terraform_state.id
+
+  versioning_configuration {
+    status = "Enabled"
+  }
+}
+
+resource "aws_s3_bucket_server_side_encryption_configuration" "terraform_state" {
+  bucket = aws_s3_bucket.terraform_state.id
+
+  rule {
+    apply_server_side_encryption_by_default {
+      sse_algorithm = "AES256"
+    }
+  }
+}
\ No newline at end of file