Terraform resource: aws kms key

aws_kms_key https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key

• deletion_window_in_days: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key#deletion_window_in_days safety measure to delay key deletion, this waiting can be defined between 7 and 30 days

Official example

resource "aws_kms_key" "a" {
  description             = "KMS key 1"
  deletion_window_in_days = 10
}

• key_id
• policy (optional) https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key#policy

Errors

• Error: MalformedPolicyDocumentException: Policy contains a statement with one or more invalid principals.
• Error: "kms_key_id" (arn:::aws) is an invalid ARN: arn: not enough sections
• Error: updating KMS Key

Related

• aws_kms_alias
• Terraform EKS module
• execute_command_configuration

See also

• aws_kms_key, kms:
• Terraform KMS: KMS module, KMS resources: aws_kms_alias, aws_kms_key, aws_kms_ciphertext, aws_kms_external_key, aws_kms_grant, aws_kms_replica_external_key, aws_kms_replica_key
• AWS KMS, Terraform KMS, kms:, create_kms_key