output "cmks" {
  description = "Customer managed KMS key arns"
  value = {
    backup = {
      alias = one(aws_kms_alias.backup.*.name)
      arn   = one(aws_kms_key.backup.*.arn)
    },
    database = {
      alias = one(aws_kms_alias.database.*.name)
      arn   = one(aws_kms_key.database.*.arn)
    },
    allpurpose = {
      alias = one(aws_kms_alias.allpurpose.*.name)
      arn   = one(aws_kms_key.allpurpose.*.arn)
    },
    secret = {
      alias = one(aws_kms_alias.secret.*.name)
      arn   = one(aws_kms_key.secret.*.arn)
    },
    log = {
      alias = one(aws_kms_alias.log.*.name)
      arn   = one(aws_kms_key.log.*.arn)
    },
    notify = {
      alias = one(aws_kms_alias.notify.*.name)
      arn   = one(aws_kms_key.notify.*.arn)
    },
    ssm = {
      alias = one(aws_kms_alias.ssm.*.name)
      arn   = one(aws_kms_key.ssm.*.arn)
    }
    storage = {
      alias = one(aws_kms_alias.storage.*.name)
      arn   = one(aws_kms_key.storage.*.arn)
    },
    eksebs = {
      alias = one(aws_kms_alias.eks_ebs.*.name)
      arn   = one(aws_kms_key.eks_ebs.*.arn)
    }
  }
}