https://github.com/dod-iac/terraform-aws-lambda-kms-key
A KMS key used to encrypt data used by Lambda
https://github.com/dod-iac/terraform-aws-lambda-kms-key
aws kms lambda terraform terraform-module
Last synced: 10 months ago
JSON representation
A KMS key used to encrypt data used by Lambda
- Host: GitHub
- URL: https://github.com/dod-iac/terraform-aws-lambda-kms-key
- Owner: dod-iac
- License: mit
- Created: 2020-11-25T18:21:17.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2022-09-14T00:01:53.000Z (almost 4 years ago)
- Last Synced: 2025-01-21T08:44:53.124Z (over 1 year ago)
- Topics: aws, kms, lambda, terraform, terraform-module
- Language: HCL
- Homepage: https://registry.terraform.io/modules/dod-iac/lambda-kms-key/aws
- Size: 11.7 KB
- Stars: 1
- Watchers: 5
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
## Usage
Creates a KMS key used to encrypt or decrypt data used by Lambda
```hcl
module "lambda_kms_key" {
source = "dod-iac/lambda-kms-key/aws"
tags = {
Application = var.application
Environment = var.environment
Automation = "Terraform"
}
}
```
## Terraform Version
Terraform 0.13. Pin module version to ~> 1.0.0 . Submit pull-requests to main branch.
Terraform 0.11 and 0.12 are not supported.
## License
This project constitutes a work of the United States Government and is not subject to domestic copyright protection under 17 USC § 105. However, because the project utilizes code licensed from contributors and other third parties, it therefore is licensed under the MIT License. See LICENSE file for more information.
## Requirements
| Name | Version |
|------|---------|
| [terraform](#requirement\_terraform) | >= 0.13 |
| [aws](#requirement\_aws) | >= 3.0, < 5.0 |
## Providers
| Name | Version |
|------|---------|
| [aws](#provider\_aws) | >= 3.0, < 5.0 |
## Modules
No modules.
## Resources
| Name | Type |
|------|------|
| [aws_kms_alias.lambda](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_alias) | resource |
| [aws_kms_key.lambda](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key) | resource |
| [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |
| [aws_iam_policy_document.lambda](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
| [aws_partition.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/partition) | data source |
| [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| [description](#input\_description) | The description of the key as viewed in AWS console. | `string` | `"A KMS key used by Lambda."` | no |
| [key\_deletion\_window\_in\_days](#input\_key\_deletion\_window\_in\_days) | Duration in days after which the key is deleted after destruction of the resource, must be between 7 and 30 days. | `string` | `30` | no |
| [name](#input\_name) | The display name of the alias. The name must start with the word "alias" followed by a forward slash (alias/). | `string` | `"alias/lambda"` | no |
| [tags](#input\_tags) | Tags applied to the KMS key. | `map(string)` | `{}` | no |
## Outputs
| Name | Description |
|------|-------------|
| [aws\_kms\_alias\_arn](#output\_aws\_kms\_alias\_arn) | The Amazon Resource Name (ARN) of the key alias. |
| [aws\_kms\_alias\_name](#output\_aws\_kms\_alias\_name) | The display name of the alias. |
| [aws\_kms\_key\_arn](#output\_aws\_kms\_key\_arn) | The Amazon Resource Name (ARN) of the key. |