#!/bin/bash

# Check if bucket exists
if ! aws s3api head-bucket --bucket $BUCKET_NAME 2>/dev/null; then
    # Bucket does not exist, create it
    aws s3api create-bucket --bucket $BUCKET_NAME --region $AWS_REGION

    # Configure bucket settings
    aws s3api put-public-access-block --bucket $BUCKET_NAME --public-access-block-configuration "BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true"

    aws s3api put-bucket-encryption --bucket $BUCKET_NAME --server-side-encryption-configuration '{"Rules": [{"ApplyServerSideEncryptionByDefault": {"SSEAlgorithm": "'$BUCKET_SSE_ALG'"}}]}'

    aws s3api put-bucket-versioning --bucket $BUCKET_NAME --versioning-configuration Status=$BUCKET_VERSIONING
fi