Add support for kms_key_id in AWS Secrets Manager and Parameter Store…

… syncs

doppler/resource_sync_types.go

@@ -20,6 +20,12 @@ func resourceSyncAWSSecretsManager() *schema.Resource {
 				Required:    true,
 				ForceNew:    true,
 			},
+			"kms_key_id": {
+				Description: "The AWS KMS key used to encrypt the secret",
+				Type:        schema.TypeString,
+				Optional:    true,
+				ForceNew:    true,
+			},
 			"tags": {
 				Description: "AWS tags to attach to the secrets",
 				Type:        schema.TypeMap,
@@ -31,11 +37,16 @@ func resourceSyncAWSSecretsManager() *schema.Resource {
 			},
 		},
 		DataBuilder: func(d *schema.ResourceData) IntegrationData {
-			return map[string]interface{}{
+			payload := map[string]interface{}{
 				"region": d.Get("region"),
 				"path":   d.Get("path"),
 				"tags":   d.Get("tags"),
 			}
+			kmsKeyId := d.Get("kms_key_id")
+			if kmsKeyId != "" {
+				payload["kms_key_id"] = kmsKeyId
+			}
+			return payload
 		},
 	}
 	return builder.Build()
@@ -63,6 +74,12 @@ func resourceSyncAWSParameterStore() *schema.Resource {
 				ForceNew:    true,
 				Default:     true,
 			},
+			"kms_key_id": {
+				Description: "The AWS KMS key used to encrypt the secret",
+				Type:        schema.TypeString,
+				Optional:    true,
+				ForceNew:    true,
+			},
 			"tags": {
 				Description: "AWS tags to attach to the parameters",
 				Type:        schema.TypeMap,
@@ -74,12 +91,17 @@ func resourceSyncAWSParameterStore() *schema.Resource {
 			},
 		},
 		DataBuilder: func(d *schema.ResourceData) IntegrationData {
-			return map[string]interface{}{
+			payload := map[string]interface{}{
 				"region":        d.Get("region"),
 				"path":          d.Get("path"),
 				"secure_string": d.Get("secure_string"),
 				"tags":          d.Get("tags"),
 			}
+			kmsKeyId := d.Get("kms_key_id")
+			if kmsKeyId != "" {
+				payload["kms_key_id"] = kmsKeyId
+			}
+			return payload
 		},
 	}
 	return builder.Build()