cloudwatch-kms-key
dod-iac/cloudwatch-kms-key/aws
A KMS key used to encrypt data-at-rest stored in CloudWatch Logs
Usage Creates a KMS key used to encrypt data-at-rest stored in CloudWatch Logs ``hcl module "cloudwatch_kms_key" { source = "dod-iac/cloudwatch-kms-key/aws" name = "alias/name" tags = { Application = var.application Environment = var.environment Automation = "Terraform" } } ` Testing Run all terratest tests using the terratest script. If using aws-vault, you could use aws-vault exec $AWS_PROFILE -- terratest. The AWS_DEFAULT_REGION environment variable is required by the tests. Use TT_SKIP_DESTROY=1 to not destroy the infrastructure created during the tests. Use TT_VERBOSE=1 to log all tests as they are run. The go test command can be executed directly, too. Terraform Version Terraform 0.13. Pin module version to ~> 1.0.0 . Submit pull-requests to main branch. Terraform 0.11 and 0.12 are n
| Name | Type | Description | Default |
|---|---|---|---|
| description | string | The description of the key as viewed in AWS console. | "A KMS key used to encrypt data-at-rest |
| key_deletion_window_in_days | string | Duration in days after which the key is deleted after destruction of the resourc | 30 |
| name | string | The display name of the alias. The name must start with the word "alias" followe | "alias/cloudwatch" |
| tags | map(string) | Tags applied to the KMS key. | {} |
aws_kms_key_arn — The Amazon Resource Name (ARN) of the key.aws_kms_alias_arn — The Amazon Resource Name (ARN) of the key alias.aws_kms_alias_name — The display name of the alias.Azure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,