| 12345678910111213141516171819 |
- locals {
- # For the default EBS key, we allow the entire account access
- root_arn = "arn:${var.aws_partition}:iam::${var.aws_account_id}:root"
- }
- module "keycloak_key" {
- source = "../../submodules/kms/ebs-key"
- name = "keycloak_key"
- alias = "alias/keycloak"
- description = "encrypt and decrypt the keycloak RDS"
- tags = merge(var.standard_tags, var.tags)
- key_admin_arns = [ ]
- key_user_arns = concat([ local.root_arn ], var.extra_key_users)
- key_attacher_arns = concat([ local.root_arn ], var.extra_key_attachers)
- standard_tags = var.standard_tags
- aws_account_id = var.aws_account_id
- aws_partition = var.aws_partition
- }
|
