Encrypt standard export bucket with KMS key

nationalarchives · Oct 12, 2023 · d2c3e59 · d2c3e59
1 parent 88522f1
commit d2c3e59
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 5 deletions.
diff --git a/da-terraform-modules b/da-terraform-modules
diff --git a/root.tf b/root.tf
@@ -487,10 +487,14 @@ module "export_step_function" {
 }
 
 module "export_bucket" {
-  source      = "./tdr-terraform-modules/s3"
-  project     = var.project
-  function    = "consignment-export"
-  common_tags = local.common_tags
+  source             = "./tdr-terraform-modules/s3"
+  project            = var.project
+  function           = "consignment-export"
+  common_tags        = local.common_tags
+  kms_key_id         = local.s3_encryption_key_arn
+  bucket_key_enabled = local.bucket_key_enabled
+  tre_role_arn       = local.tre_export_role_arn
+  bucket_policy      = "export_bucket"
 }
 
 module "export_bucket_judgment" {
+20 −5		s3/main.tf
+20 −0		s3/templates/default_bucket_policy.json.tpl
+5 −0		s3/variables.tf