All Modules
AWSSecurity
KMS
Customer Managed Key with auto-rotation, alias, and configurable key policy
Usage
module "kms" {
source = "github.com/fencepencil/fencepencil-aws-modules//kms"
alias = "<alias>"
tags = var.tags
}Inputs (6)
| Name | Type | Description | Default | Required |
|---|---|---|---|---|
alias | string | Alias for the KMS key | — | yes |
description | string | Description of the KMS key | Customer managed KMS key | no |
deletion_window_in_days | number | Days before key is deleted | 30 | no |
rotation_period_in_days | number | Days between key rotations | 365 | no |
multi_region | bool | Create a multi-region key | false | no |
tags | map(string) | Tags to apply to all resources | {} | no |
Outputs (3)
| Name | Description |
|---|---|
key_id | ID of the KMS key |
key_arn | ARN of the KMS key |
alias_arn | ARN of the KMS alias |