rds-key.tf 689 B

12345678910111213141516171819
  1. locals {
  2. # For the default EBS key, we allow the entire account access
  3. root_arn = "arn:${var.aws_partition}:iam::${var.aws_account_id}:root"
  4. }
  5. module "rhsso_key" {
  6. source = "../../submodules/kms/ebs-key"
  7. name = "rhsso_key"
  8. alias = "alias/rhsso"
  9. description = "encrypt and decrypt the rhsso RDS"
  10. tags = merge(local.standard_tags, var.tags)
  11. key_admin_arns = []
  12. key_user_arns = concat([local.root_arn], var.extra_key_users)
  13. key_attacher_arns = concat([local.root_arn], var.extra_key_attachers)
  14. standard_tags = local.standard_tags
  15. aws_account_id = var.aws_account_id
  16. aws_partition = var.aws_partition
  17. }