resource "aws_s3_bucket" "o11y_platform" {
  count = local.o11y_platform_enabled ? 1 : 0

  bucket        = local.o11y_platform_bucket
  force_destroy = true

  tags = merge(local.common_tags, {
    Name = local.o11y_platform_bucket
  })
}

resource "aws_s3_bucket_ownership_controls" "o11y_platform" {
  count = local.o11y_platform_enabled ? 1 : 0

  bucket = aws_s3_bucket.o11y_platform[0].id

  rule {
    object_ownership = "BucketOwnerEnforced"
  }
}

resource "aws_s3_bucket_public_access_block" "o11y_platform" {
  count = local.o11y_platform_enabled ? 1 : 0

  bucket = aws_s3_bucket.o11y_platform[0].id

  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}