fix(misconf): change default ACL of digitalocean_spaces_bucket to pri…

…vate (#7577) Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
aquasecurity · Oct 17, 2024 · 9da84f5 · 9da84f5
1 parent 2eaa17e
commit 9da84f5
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/pkg/iac/adapters/terraform/digitalocean/spaces/adapt.go b/pkg/iac/adapters/terraform/digitalocean/spaces/adapt.go
@@ -24,7 +24,7 @@ func adaptBuckets(modules terraform.Modules) []spaces.Bucket {
 				Metadata:     block.GetMetadata(),
 				Name:         block.GetAttribute("name").AsStringValueOrDefault("", block),
 				Objects:      nil,
-				ACL:          block.GetAttribute("acl").AsStringValueOrDefault("public-read", block),
+				ACL:          block.GetAttribute("acl").AsStringValueOrDefault("private", block),
 				ForceDestroy: block.GetAttribute("force_destroy").AsBoolValueOrDefault(false, block),
 				Versioning: spaces.Versioning{
 					Metadata: block.GetMetadata(),

diff --git a/pkg/iac/adapters/terraform/digitalocean/spaces/adapt_test.go b/pkg/iac/adapters/terraform/digitalocean/spaces/adapt_test.go
@@ -69,7 +69,7 @@ func Test_adaptBuckets(t *testing.T) {
 					Metadata:     iacTypes.NewTestMetadata(),
 					Name:         iacTypes.String("", iacTypes.NewTestMetadata()),
 					Objects:      nil,
-					ACL:          iacTypes.String("public-read", iacTypes.NewTestMetadata()),
+					ACL:          iacTypes.String("private", iacTypes.NewTestMetadata()),
 					ForceDestroy: iacTypes.Bool(false, iacTypes.NewTestMetadata()),
 					Versioning: spaces.Versioning{
 						Metadata: iacTypes.NewTestMetadata(),