updated the lifecycle information and configurability

s3-bucket.tf

@@ -2,25 +2,24 @@ resource "aws_s3_bucket" "config" {
   acl     = "log-delivery-write"
   bucket  = "${local.config_name}"
 
+  lifecycle {
+    prevent_destroy = true
+  }
+
   lifecycle_rule {
     id = "log"
-    prefix = "/"
     enabled = true
 
     transition {
-      days = 30
+      days          = "${var.transition_to_glacier}"
       storage_class = "GLACIER"
     }
 
     expiration {
-      days = 2555
+      days = "${var.expiration}"
     }
   }
 
-  lifecycle {
-    prevent_destroy = true
-  }
-
   logging {
     target_bucket = "${var.log_bucket}"
     target_prefix = "s3/${local.config_name}/"

variables.tf

@@ -10,6 +10,12 @@ variable "enable_recorder" {
   type        = "string"
 }
 
+variable "expiration" {
+  default     = 2555
+  description = "The number of days to wait before expiring an object"
+  type        = "string"
+}
+
 variable "log_bucket" {
   description = "The log bucket to write S3 logs to."
   type        = "string"
@@ -141,4 +147,10 @@ variable "tags" {
   default     = {}
   description = "A mapping of tags to assign to created resources"
   type        = "map"
+}
+
+variable "transition_to_glacier" {
+  default     = 30
+  description = "The number of days to wait before transitioning an object to Glacier"
+  type        = "string"
 }