diff --git a/cloudtrail/sns.tf b/cloudtrail/sns.tf
index 194a93c..6960207 100644
--- a/cloudtrail/sns.tf
+++ b/cloudtrail/sns.tf
@@ -1,6 +1,7 @@
 resource "aws_sns_topic" "cloudtrail" {
-  count = var.enable_sns ? 1 : 0
-  name  = local.name
+  count             = var.enable_sns ? 1 : 0
+  name              = local.name
+  kms_master_key_id = data.aws_kms_key.incoming_key.id
 
   tags = merge(
     local.base_tags,