From 66738bfbad4060ee6012a9a0664d5ec62b64aeaf Mon Sep 17 00:00:00 2001 From: Chris Patti Date: Tue, 7 Mar 2023 14:13:08 -0500 Subject: [PATCH] Revert explicit kms s3 sse as it happens by default now --- .../applications/micromasters/__main__.py | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/src/ol_infrastructure/applications/micromasters/__main__.py b/src/ol_infrastructure/applications/micromasters/__main__.py index 95618cb1c..5be5fc0f2 100644 --- a/src/ol_infrastructure/applications/micromasters/__main__.py +++ b/src/ol_infrastructure/applications/micromasters/__main__.py @@ -27,7 +27,6 @@ micromasters_config = Config("micromasters") stack_info = parse_stack() network_stack = StackReference(f"infrastructure.aws.network.{stack_info.name}") -kms_stack = StackReference(f"infrastructure.aws.kms.{stack_info.name}") micromasters_vpc = network_stack.require_output("applications_vpc") operations_vpc = network_stack.require_output("operations_vpc") micromasters_environment = f"micromasters-{stack_info.env_suffix}" @@ -42,7 +41,6 @@ # Create S3 bucket # Bucket used to store files from MicroMasters app. -kms_s3_key = kms_stack.require_output("kms_s3_data_analytics_key") micromasters_bucket_name = f"ol-micromasters-app-{stack_info.env_suffix}" micromasters_bucket = s3.Bucket( f"micromasters-{stack_info.env_suffix}", @@ -52,22 +50,12 @@ ), tags=aws_config.tags, acl="private", - server_side_encryption_configuration=s3.BucketServerSideEncryptionConfigurationArgs( - rule=s3.BucketServerSideEncryptionConfigurationRuleArgs( - apply_server_side_encryption_by_default=s3.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs( # noqa: E501 - sse_algorithm="aws:kms", - kms_master_key_id=kms_s3_key["id"], - ), - bucket_key_enabled=True, - ) - ), policy=json.dumps( { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", - "Principal": "*", "Action": [ "s3:GetObject", "s3:ListAllMyBuckets",