Requirements

Name Version
terraform >= 1.9.0

Inputs

Name Description Type Default Required
alias Alias name for the hieradata KMS key string n/a yes
aws_account_id The AWS Account ID (numeric) string n/a yes
component The name of the terraformscaffold component calling this module string n/a yes
default_tags Default tag map for application to all taggable resources in the module map(string) {} no
deletion_window KMS key deletion window string n/a yes
environment The name of the terraformscaffold environment the module is called for string n/a yes
iam_delegation Whether to delegate administration of the key to the local account. Defaults to true bool true no
is_multi_region Whether the KMS key is a multi-region key, where secondary region would mostly be us-east-1. Defaults to false bool false no
key_policy_documents List of KMS key policy JSON documents list(string) [] no
name A unique name to distinguish this module invocation from others within the same CSI scope string n/a yes
project The name of the terraformscaffold project calling the module string n/a yes
region The AWS Region string n/a yes

Outputs

Name Description
admin_policy_arn ARN of the admin IAM policy
key_arn ARN of the KMS key
key_id ID of the KMS key
replica_key_arn ARN of the Replica KMS key
replica_key_id ID of the Replica KMS key
user_policy_arn ARN of the user IAM policy