output "cmks" {
  description = "Customer managed KMS key arns"
  value = {
    backup = {
      alias = aws_kms_alias.backup.*.name
      arn   = aws_kms_key.backup.*.arn
    },
    database = {
      alias = aws_kms_alias.database.*.name
      arn   = aws_kms_key.database.*.arn
    },
    allpurpose = {
      alias = aws_kms_alias.allpurpose.*.name
      arn   = aws_kms_key.allpurpose.*.arn
    },
    secret = {
      alias = aws_kms_alias.secret.*.name
      arn   = aws_kms_key.secret.*.arn
    },
    log = {
      alias = aws_kms_alias.log.*.name
      arn   = aws_kms_key.log.*.arn
    },
    notify = {
      alias = aws_kms_alias.notify.*.name
      arn   = aws_kms_key.notify.*.arn
    },
    storage = {
      alias = aws_kms_alias.storage.*.name
      arn   = aws_kms_key.storage.*.arn
    }
  }
}