CCM-10231: Adding multi-region kms key support

sidnhs · sidnhs · commit 6aedaf0712fe · 2025-06-06T14:38:17.000+01:00
diff --git a/infrastructure/modules/kms/kms_replica_key_replica.tf b/infrastructure/modules/kms/kms_replica_key_replica.tf
@@ -3,5 +3,6 @@ resource "aws_kms_replica_key" "replica" {
   provider                = aws.us-east-1
   description             = "Multi-Region replica key"
   deletion_window_in_days = var.deletion_window
+  policy                  = data.aws_iam_policy_document.key.json
   primary_key_arn         = aws_kms_key.main.arn
 }

Original file line number	Diff line number	Diff line change
`@@ -3,5 +3,6 @@ resource "aws_kms_replica_key" "replica" {`
`3`	`3`	`provider = aws.us-east-1`
`4`	`4`	`description = "Multi-Region replica key"`
`5`	`5`	`deletion_window_in_days = var.deletion_window`
	`6`	`+ policy = data.aws_iam_policy_document.key.json`
`6`	`7`	`primary_key_arn = aws_kms_key.main.arn`
`7`	`8`	`}`