This is a small utility module that provisions a KMS Key for Terraform use and creates
a policy to allow IAM administration of all keys on the AWS account.
Name |
Version |
terraform |
>= 0.12 |
Name |
Description |
Type |
Default |
Required |
all_keys_admin_policy |
Name of policy to allow administration of all keys |
string |
"AllKeysAdministration" |
no |
create_all_keys_policy |
Create the all keys policy |
bool |
true |
no |
key_policy_statements |
Additional statements for the key policies. |
list(string) |
[] |
no |
kms_terraform_alias |
Alias for the Terraform key |
string |
"alias/terraform" |
no |
tags |
Tags for resoruces |
map |
{} |
no |
Name |
Description |
all_keys_policy |
Name of the All Keys policy |
all_keys_policy_arn |
ARN of the All Keys policy |
terraform_key_alias |
Key alias for the KMS key used for Terraform operations |
terraform_key_arm |
ARN of the key created |
terraform_key_id |
Key alias for the KMS key used for Terraform operations |