diff --git a/common/kms.tf b/common/kms.tf index 6ad1df0..e7410d0 100644 --- a/common/kms.tf +++ b/common/kms.tf @@ -20,6 +20,7 @@ resource "aws_kms_key" "key" { description = "KMS CMK for S3 bucket ${local.name}" enable_key_rotation = true policy = data.aws_iam_policy_document.key_policy_combined.json + multi_region = var.multi_region tags = merge( local.base_tags, diff --git a/common/variables.kms.tf b/common/variables.kms.tf index 4eda73e..713ae95 100644 --- a/common/variables.kms.tf +++ b/common/variables.kms.tf @@ -27,3 +27,9 @@ variable "use_kms_encryption" { type = bool default = true } + +variable "multi_region" { + description = "Flag to enable or disable the use of a multi-region KMS key (default=false)" + type = bool + default = false +}