-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
UML-3138 Move TF account to region #2379
Conversation
} | ||
|
||
resource "aws_kms_key" "cloudwatch" { | ||
description = "Cloudwatch encryption ${local.environment}" | ||
description = "Cloudwatch encryption ${var.environment_name}" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this could be the multi region kms key module
kms_key_id = module.secrets_manager_mrk.key_id | ||
|
||
replica { | ||
kms_key_id = module.secrets_manager_mrk.key_id |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this needs to be the id of the key in the region of the replicated secret, so the id of the replicated/secondary kms key.
This would have an affect if you needed to reference the key ARN (which has the region)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Related multi-Region keys have the same key ID. Happy to change if it will reduce ambiguity
Purpose
Move account resources into region
Fixes UML-3138
Approach
Explain how your code addresses the purpose of the change
Learning
Any tips and tricks, blog posts or tools which helped you. Plus anything notable you've discovered about the Use a Lasting Power of Attorney service
Checklist