You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| alias | The display name of the alias. The name must start with the word `alias` followed by a forward slash. |`string`|`""`| no |
209
-
| aliases\_use\_name\_prefix | Determines whether the alias name is used as a prefix |`bool`|`false`| no |
210
202
| attributes | Additional attributes (e.g. `1`). |`list(string)`|`[]`| no |
211
-
| bypass\_policy\_lockout\_safety\_check | A flag to indicate whether to bypass the key policy lockout safety check. Setting this value to true increases the risk that the KMS key becomes unmanageable |`bool`|`null`| no |
212
-
| computed\_aliases | A map of aliases to create. Values provided via the `name` key of the map can be computed from upstream resources |`any`|`{}`| no |
203
+
| bypass\_policy\_lockout\_safety\_check | A flag to indicate whether to bypass the key policy lockout safety check. Setting this value to true increases the risk that the KMS key becomes unmanageable |`bool`|`false`| no |
213
204
| create\_external\_enabled | Determines whether an external CMK (externally provided material) will be created or a standard CMK (AWS provided material) |`bool`|`false`| no |
205
+
| create\_replica\_enabled | Determines whether a replica standard CMK will be created (AWS provided material) |`bool`|`false`| no |
206
+
| create\_replica\_external\_enabled | Determines whether a replica external CMK will be created (externally provided material) |`bool`|`false`| no |
214
207
| customer\_master\_key\_spec | Specifies whether the key contains a symmetric key or an asymmetric key pair and the encryption algorithms or signing algorithms that the key supports. Valid values: SYMMETRIC\_DEFAULT, RSA\_2048, RSA\_3072, RSA\_4096, ECC\_NIST\_P256, ECC\_NIST\_P384, ECC\_NIST\_P521, or ECC\_SECG\_P256K1. Defaults to SYMMETRIC\_DEFAULT. |`string`|`"SYMMETRIC_DEFAULT"`| no |
215
208
| deletion\_window\_in\_days | Duration in days after which the key is deleted after destruction of the resource. |`number`|`10`| no |
216
209
| description | The description of the key as viewed in AWS console. |`string`|`"Parameter Store KMS master key"`| no |
@@ -221,15 +214,14 @@ Here is an example of how you can use this module in your inventory structure:
221
214
| key\_material\_base64 | Base64 encoded 256-bit symmetric encryption key material to import. The CMK is permanently associated with this key material. External key only |`string`|`null`| no |
222
215
| key\_usage | Specifies the intended use of the key. Defaults to ENCRYPT\_DECRYPT, and only symmetric encryption and decryption are supported. |`string`|`"ENCRYPT_DECRYPT"`| no |
223
216
| kms\_key\_enabled | Specifies whether the kms is enabled or disabled. |`bool`|`true`| no |
224
-
| label\_order | label order, e.g. `name`,`application`. |`list(any)`|`[]`| no |
217
+
| label\_order | label order, e.g. `name`,`application`. |`list(any)`|<pre>[<br> "name",<br> "environment"<br>]</pre>| no |
225
218
| managedby | ManagedBy, eg 'CloudDrove'. |`string`|`"[email protected]"`| no |
226
219
| multi\_region | Indicates whether the KMS key is a multi-Region (true) or regional (false) key. |`bool`|`true`| no |
227
220
| name | Name (e.g. `app` or `cluster`). |`string`|`""`| no |
228
221
| policy | A valid policy JSON document. Although this is a key policy, not an IAM policy, an `aws_iam_policy_document`, in the form that designates a principal, can be used |`string`|`null`| no |
229
222
| primary\_external\_key\_arn | The primary external key arn of a multi-region replica external key |`string`|`null`| no |
230
223
| primary\_key\_arn | The primary key arn of a multi-region replica key |`string`|`""`| no |
231
224
| repository | Terraform current module repo |`string`|`"https://github.com/clouddrove/terraform-aws-kms"`| no |
232
-
| tags | Additional tags (e.g. map(`BusinessUnit`,`XYZ`). |`map(string)`|`{}`| no |
233
225
| valid\_to | Time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the CMK becomes unusable. If not specified, key material does not expire |`string`|`""`| no |
0 commit comments