resource "aws_s3_bucket" "starter_dm_storage" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket        = local.starter_dm_storage_bucket
  force_destroy = true

  tags = merge(local.common_tags, {
    Name = local.starter_dm_storage_bucket
  })
}

resource "aws_s3_bucket_public_access_block" "starter_dm_storage" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket                  = aws_s3_bucket.starter_dm_storage[0].id
  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}

resource "aws_s3_bucket_server_side_encryption_configuration" "starter_dm_storage" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket = aws_s3_bucket.starter_dm_storage[0].id

  rule {
    apply_server_side_encryption_by_default {
      sse_algorithm = "AES256"
    }
  }
}

resource "aws_s3_bucket" "starter_stashing_area" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket        = local.starter_stashing_area_bucket
  force_destroy = true

  tags = merge(local.common_tags, {
    Name = local.starter_stashing_area_bucket
  })
}

resource "aws_s3_bucket_public_access_block" "starter_stashing_area" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket                  = aws_s3_bucket.starter_stashing_area[0].id
  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}

resource "aws_s3_bucket_server_side_encryption_configuration" "starter_stashing_area" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket = aws_s3_bucket.starter_stashing_area[0].id

  rule {
    apply_server_side_encryption_by_default {
      sse_algorithm = "AES256"
    }
  }
}

resource "aws_s3_bucket" "starter_serverless_storage" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket        = local.starter_serverless_storage_bucket
  force_destroy = true

  tags = merge(local.common_tags, {
    Name = local.starter_serverless_storage_bucket
  })
}

resource "aws_s3_bucket_public_access_block" "starter_serverless_storage" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket                  = aws_s3_bucket.starter_serverless_storage[0].id
  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}

resource "aws_s3_bucket_server_side_encryption_configuration" "starter_serverless_storage" {
  count = local.starter_remote_eks_enabled ? 1 : 0

  bucket = aws_s3_bucket.starter_serverless_storage[0].id

  rule {
    apply_server_side_encryption_by_default {
      sse_algorithm = "AES256"
    }
  }
}