Usage

Creates a KMS Key for use with Amazon Workspaces.

module "workspaces_kms_key" {
  source = "dod-iac/workspaces-kms-key/aws"

  name = format("alias/app-%s-workspaces-%s", var.application, var.environment)
  description = format("A KMS key used to encrypt data at rest in Amazon Workspaces for %s:%s.", var.application, var.environment)
  tags = {
    Application = var.application
    Environment = var.environment
    Automation  = "Terraform"
  }
}

Terraform Version

Terraform 0.12. Pin module version to "~> 1.0.0". Submit pull-requests to "master" branch.

Terraform 0.11 is not supported.

Contributing

We'd love to have your contributions! Please see CONTRIBUTING.md for more info.

Security

Please see SECURITY.md for more info.

License

This project constitutes a work of the United States Government and is not subject to domestic copyright protection under 17 USC § 105. However, because the project utilizes code licensed from contributors and other third parties, it therefore is licensed under the MIT License. See LICENSE file for more information.

Requirements

Name	Version
terraform	>= 0.13
aws	~> 3.0

Providers

Name	Version
aws	~> 3.0

Modules

No Modules.

Resources

Name
aws_caller_identity
aws_iam_policy_document
aws_kms_alias
aws_kms_key
aws_partition

Inputs

Name	Description	Type	Default	Required
description	n/a	string	"A KMS key used to encrypt data at rest stored in Amazon Workspaces."	no
key_deletion_window_in_days	Duration in days after which the key is deleted after destruction of the resource, must be between 7 and 30 days.	string	30	no
name	The display name of the alias. The name must start with the word "alias" followed by a forward slash (alias/).	string	"alias/workspaces"	no
tags	Tags applied to the KMS key.	map(string)	{}	no

Outputs

Name	Description
aws_kms_alias_arn	The Amazon Resource Name (ARN) of the key alias.
aws_kms_alias_name	The display name of the alias.
aws_kms_key_arn	The Amazon Resource Name (ARN) of the key.