Error deleting S3 Bucket about terraform-aws-secure-baseline HOT 3 CLOSED

@kylelundstedt
Thanks for the report. I added audit_log_bucket_force_destroy as a module input variable which then passed to aws_s3_bucket resources. The default value is set to false to prevent accidental deletion of audit log records.

from terraform-aws-secure-baseline.

Fantastic!!! Thanks so much for successfully tackling this issue so quickly.

from terraform-aws-secure-baseline.

Hi @nozaq

I had a new issue pop up that may (or may not) be related to the the "force destroy" option that you put in place for the audit bucket.

Now when I run the secure-baseline module, everything works except for the bucket-related tasks. I get the following error after running terragrunt apply:

Error: Error creating S3 bucket: AuthorizationHeaderMalformed: The authorization header is malformed; the region 'us-east-1' is wrong; expecting 'us-west-2'
        status code: 400, request id: EF33E2B670A47024, host id: QV0D2p0NuiJ8cuELIyKcJVyu7d19WLO1SNe+IbEBCa8VcVTB1Yxbb9yDGwlj6jEHwljzA6onKmc=

I'm passing in region = "us-east-1" as one of the inputs in my terragrunt.hcl file. These inputs seem to work fine when used as part of the sub-modules like vpc-baseline; for example, the Default VPC gets changed correctly in each region. However, it appears that any sub-module that depends on creating an S3 bucket (i.e., secure-bucket) - about 45 of the 251 actions - does not work. Any ideas?

from terraform-aws-secure-baseline.