update workflow

Azure · May 23, 2024 · 3e737f2 · 3e737f2
1 parent ee39947
commit 3e737f2
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 10 deletions.
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
@@ -17,6 +17,4 @@ jobs:
       - name: tfsec
         uses: aquasecurity/[email protected]
         with:
-          working_directory: ${{ github.workspace }}
-          tfsec_args: --soft-fail
           github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/modules/terraform/aws/data-disk/main.tf b/modules/terraform/aws/data-disk/main.tf
@@ -1,6 +1,6 @@
-# resource "aws_kms_key" "ebs_encryption" {
-#   enable_key_rotation = true
-# }
+resource "aws_kms_key" "ebs_encryption" {
+  enable_key_rotation = true
+}
 
 resource "aws_ebs_volume" "data_disk" {
   availability_zone = var.zone
@@ -10,9 +10,7 @@ resource "aws_ebs_volume" "data_disk" {
   iops       = var.data_disk_iops_read_write
   throughput = var.data_disk_mbps_read_write
 
-  # encrypted  = true
-  # kms_key_id = aws_kms_key.ebs_encryption.id
-
-
-  tags = var.tags
+  encrypted  = true
+  kms_key_id = aws_kms_key.ebs_encryption.id
+  tags       = var.tags
 }