From 8e191496e1f307eb5fd542995685d93022282ab2 Mon Sep 17 00:00:00 2001
From: Peter Rifel <pgrifel@gmail.com>
Date: Sat, 7 Sep 2024 10:43:24 -0500
Subject: [PATCH] Only set aws_s3_object SSE and ACL if not empty

---
 util/pkg/vfs/s3fs.go | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/util/pkg/vfs/s3fs.go b/util/pkg/vfs/s3fs.go
index c48c4fa573..3501a28482 100644
--- a/util/pkg/vfs/s3fs.go
+++ b/util/pkg/vfs/s3fs.go
@@ -752,10 +752,14 @@ func (p *S3Path) RenderTerraform(w *terraformWriter.TerraformWriter, name string
 			Bucket:   p.Bucket(),
 			Key:      p.Key(),
 			Content:  content,
-			SSE:      &sseVal,
-			Acl:      &aclVal,
 			Provider: terraformWriter.LiteralTokens("aws", "files"),
 		}
+		if sseVal != "" {
+			tf.SSE = &sseVal
+		}
+		if aclVal != "" {
+			tf.Acl = &aclVal
+		}
 		return w.RenderResource("aws_s3_object", name, tf)
 	}