Change encryption key type (#37)

* Change encrytionkey type
FitnessKeeper · Dec 1, 2023 · 05473e7 · 05473e7
1 parent 07b6601
commit 05473e7
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/data.tf b/data.tf
@@ -80,7 +80,7 @@ data "aws_iam_policy_document" "task_execution_role_policy" {
   statement {
     effect    = "Allow"
     actions   = ["kms:Decrypt"]
-    resources = [var.encryption_key]
+    resources = var.encryption_keys
   }
 
   statement {

diff --git a/variables.tf b/variables.tf
@@ -325,7 +325,8 @@ variable "secret_arns" {
   default     = null
 }
 
-variable "encryption_key" {
+variable "encryption_keys" {
   description = "Kms key to decrypt secrets"
-  default     = null
+  type        = list(string)
+  default     = []
 }