feat: Added lifecycle policy to the s3 bucket.

codeforamerica · Feb 11, 2025 · 0843d1e · 0843d1e
1 parent b9a34d3
commit 0843d1e
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/s3.tf b/s3.tf
@@ -52,3 +52,20 @@ resource "aws_s3_bucket_policy" "tfstate" {
     bucket : aws_s3_bucket.tfstate.bucket
   })
 }
+
+resource "aws_s3_bucket_lifecycle_configuration" "tfstate" {
+  bucket = aws_s3_bucket.tfstate.id
+
+  rule {
+    id = "state"
+    status = "Enabled"
+
+    abort_incomplete_multipart_upload {
+      days_after_initiation = 7
+    }
+
+    noncurrent_version_expiration {
+      noncurrent_days = var.state_version_expiration
+    }
+  }
+}
diff --git a/variables.tf b/variables.tf
@@ -20,6 +20,12 @@ variable "project" {
   description = "Project that these resources are supporting."
 }
 
+variable "state_version_expiration" {
+  type = number
+  description = "Age (in days) before non-current versions of the state file are expired."
+  default = 30
+}
+
 variable "tags" {
   type        = map(string)
   description = "Tags to apply to all resources."