# tfsec:ignore:aws-dynamodb-enable-recovery No need to recover lock table
resource "aws_dynamodb_table" "lock_table" {
  count = local.dynamodb_support == true ? 1 : 0

  name         = aws_s3_bucket.state_storage.id
  billing_mode = "PAY_PER_REQUEST"
  hash_key     = "LockID"

  server_side_encryption {
    enabled = true
    #kms_key_arn = aws_kms_key.tfstate.arn # default
  }

  attribute {
    name = "LockID"
    type = "S"
  }

  tags = local.tags
}