diff --git a/CHANGELOG.md b/CHANGELOG.md index 459dc49..21b17f2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -85,3 +85,7 @@ This works with the Terraform AWS provider 3.x. * 2.4.7 -- 2022-06-01 - add bucket_domain_name and bucket_regional_domain_name to outputs.s3.tf + +* 2.5.0 -- 2022-07-15 + - kms_key + - add variable multi_region diff --git a/common/kms.tf b/common/kms.tf index 3834650..1d29a87 100644 --- a/common/kms.tf +++ b/common/kms.tf @@ -20,6 +20,7 @@ resource "aws_kms_key" "key" { description = "KMS CMK for S3 bucket ${local.name}" enable_key_rotation = true policy = data.aws_iam_policy_document.key_policy_combined.json + multi_region = var.multi_region tags = merge( local.base_tags, diff --git a/common/variables.kms.tf b/common/variables.kms.tf index 3fe6f33..a0ad00c 100644 --- a/common/variables.kms.tf +++ b/common/variables.kms.tf @@ -21,3 +21,9 @@ variable "kms_admin_roles" { type = list(string) default = [] } + +variable "multi_region" { + description = "Flag to enable or disable the use of a multi-region KMS key (default=false)" + type = bool + default = false +} diff --git a/common/version.tf b/common/version.tf index 994520b..fca0743 100644 --- a/common/version.tf +++ b/common/version.tf @@ -1,3 +1,3 @@ locals { - _module_version = "2.4.7" + _module_version = "2.5.0" }