32 lines
750 B
Terraform
32 lines
750 B
Terraform
resource "aws_kms_external_key" "kms-key1" {
|
|
description = "Customer managed key"
|
|
key_material_base64 = "s5yiaoDbfHrBkbuGdyIxQaILucovIgPMbw8/pgYZJu0="
|
|
enabled = true
|
|
policy =<<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Id": "key-default-1",
|
|
"Statement": [
|
|
{
|
|
"Sid": "Allow access for key administrators"
|
|
"Effect": "Allow",
|
|
"Principal": {
|
|
"AWS": [
|
|
"arn:aws:iam::376395444418:user/temp-provisioning-fullaccess",
|
|
"arn:aws:iam::376395444418:root"
|
|
]
|
|
},
|
|
"Action": "kms:*",
|
|
"Resource": "*"
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
|
|
}
|
|
|
|
resource "aws_kms_alias" "keyalias1" {
|
|
name = "alias/kf-test-3"
|
|
target_key_id = aws_kms_external_key.kms-key1.id
|
|
}
|