Merge pull request #43 from GSA/persist

adds the aws_s3_bucket_public_access_block for the inventory bucket

s3.tf

@@ -34,3 +34,12 @@ resource "aws_s3_bucket" "bucket" {
     Name = "${upper(var.project_name)} Inventory Report"
   }
 }
+
+resource "aws_s3_bucket_public_access_block" "bucket" {
+  bucket = aws_s3_bucket.bucket.id
+
+  block_public_acls       = true
+  ignore_public_acls      = true
+  block_public_policy     = true
+  restrict_public_buckets = true
+}