Skip to content

Commit

Permalink
Added KMS key replication to eu-west-1
Browse files Browse the repository at this point in the history
  • Loading branch information
ep-93 committed Jul 5, 2024
1 parent d1adc6e commit dae964c
Showing 1 changed file with 13 additions and 0 deletions.
13 changes: 13 additions & 0 deletions terraform/modernisation-platform-account/secrets.tf
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,19 @@ resource "aws_kms_alias" "secrets_key_multi_region" {
target_key_id = aws_kms_key.secrets_key_multi_region.id
}


resource "aws_kms_replica_key" "secrets_key_multi_region_replica" {
description = "AWS Secretsmanager CMK replica key"
deletion_window_in_days = 30
primary_key_arn = aws_kms_key.secrets_key_multi_region.arn
provider = aws.modernisation-platform-eu-west-1
}

resource "aws_kms_alias" "secrets_key_multi_region_replica" {
name = "alias/secrets-key-multi-region-replica"
target_key_id = aws_kms_replica_key.secrets_key_multi_region_replica.id
}

data "aws_iam_policy_document" "kms_secrets_key" {
#cannot reference secret in resources for statement as this causes cyclic error
#checkov:skip=CKV_AWS_108: Cannot set resource as not known at time document is created, causing a cyclic error
Expand Down

0 comments on commit dae964c

Please sign in to comment.