Skip to content

Commit

Permalink
remove secret and kms key
Browse files Browse the repository at this point in the history
Signed-off-by: Jacob Woffenden <jacob.woffenden@digital.justice.gov.uk>
  • Loading branch information
Jacob Woffenden committed Oct 17, 2024
1 parent f0a576f commit ed638d5
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 20 deletions.
13 changes: 0 additions & 13 deletions terraform/environments/analytical-platform-ingestion/kms-keys.tf
Original file line number Diff line number Diff line change
Expand Up @@ -213,16 +213,3 @@ module "ec2_ebs_kms" {

deletion_window_in_days = 7
}

module "datasync_registration_kms" {
#checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions

source = "terraform-aws-modules/kms/aws"
version = "3.1.0"

aliases = ["secretsmanager/datasync-registration"]
description = "DataSync registration key"
enable_default_policy = true

deletion_window_in_days = 7
}
Original file line number Diff line number Diff line change
Expand Up @@ -19,10 +19,3 @@ resource "aws_secretsmanager_secret" "slack_token" {
name = "ingestion/slack-token"
kms_key_id = module.slack_token_kms.key_arn
}

resource "aws_secretsmanager_secret" "datasync_registration" {
#checkov:skip=CKV2_AWS_57:Automatic rotation is not required for this secret

name = "datasync/registration"
kms_key_id = module.datasync_registration_kms.key_arn
}

0 comments on commit ed638d5

Please sign in to comment.