kms_key: add multi_region

terraform-modules · Jul 15, 2022 · da551ff · da551ff
1 parent 9f5962d
commit da551ff
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/common/kms.tf b/common/kms.tf
@@ -20,6 +20,7 @@ resource "aws_kms_key" "key" {
   description         = "KMS CMK for S3 bucket ${local.name}"
   enable_key_rotation = true
   policy              = data.aws_iam_policy_document.key_policy_combined.json
+  multi_region        = var.multi_region
 
   tags = merge(
     local.base_tags,

diff --git a/common/variables.kms.tf b/common/variables.kms.tf
@@ -27,3 +27,9 @@ variable "use_kms_encryption" {
   type        = bool
   default     = true
 }
+
+variable "multi_region" {
+  description = "Flag to enable or disable the use of a multi-region KMS key (default=false)"
+  type        = bool
+  default     = false
+}