resource "aws_s3_bucket" "reporting-ssm-parameters-backup" {
  bucket        = local.s3_reporting_backup_bucket
  force_destroy = false
  tags = local.cost_bucket_tags
}

resource "aws_s3_bucket_server_side_encryption_configuration" "reporting-ssm-parameters-backup" {
  bucket = aws_s3_bucket.reporting-ssm-parameters-backup.id
  rule {
    apply_server_side_encryption_by_default {
      sse_algorithm = "AES256"
    }
  }
}

resource "aws_s3_bucket_versioning" "reporting-ssm-parameters-backup" {
  bucket = aws_s3_bucket.reporting-ssm-parameters-backup.id
  versioning_configuration {
    status     = "Enabled"
    mfa_delete = "Disabled"
  }
}

resource "aws_s3_bucket_acl" "reporting-ssm-parameters-backup" {
  bucket = aws_s3_bucket.reporting-ssm-parameters-backup.id
  acl    = "private"
}

resource "aws_s3_bucket_public_access_block" "reporting-ssm-parameters-backup" {
  bucket                  = aws_s3_bucket.reporting-ssm-parameters-backup.id
  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}