resource "aws_s3_bucket" "terraform-state" {
  bucket = "product-security-terraform-state-${local.account_id}-${local.region}"
  acl    = "private"

  server_side_encryption_configuration {
    rule {
      apply_server_side_encryption_by_default {
        sse_algorithm = "AES256"
      }
    }
  }

  tags = "${local.common_tags}"

  versioning {
    enabled = true
  }
}