carlos / platform Public

infra: the box-records bucket policy waits for the bucket's public access block

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Paul Campbell pushed by claude 2 weeks ago 60cc332c443435bc19ec50dfbbae893c9ff20b85 parent bbb2bb6

1 file changed, +2 −1

diff --git a/infra/modules/deployment-buckets/main.tf b/infra/modules/deployment-buckets/main.tf

index c2d7b532c..1d9991173 100644

--- a/infra/modules/deployment-buckets/main.tf

+++ b/infra/modules/deployment-buckets/main.tf

@@ -70,7 +70,8 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "data" {

# on this bucket has broken lease releases before.

resource "aws_s3_bucket_policy" "deployment_box_records" {

- bucket = aws_s3_bucket.deployment.id

+ bucket = aws_s3_bucket.deployment.id

+ depends_on = [aws_s3_bucket_public_access_block.deployment]

policy = jsonencode({

Version = "2012-10-17"

Statement = [