xpk/terraform.aws-baseline-infra
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

UPD: added custom kms key support. the default alias/aws/sns key does not work.

Browse Source
This commit is contained in:
xpk 2024-02-21 13:52:03 +08:00
parent e15bc43e46
commit 58148f895d
Signed by: xpk
GPG Key ID: CD4FF6793F09AB86
3 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
modules/ManagementGovernance/acm-cert-expiry-notice/README.md
View File

@ -67,11 +67,12 @@ An error occurred (ValidationException) when calling the PutAccountConfiguration
## Inputs
| Name | Description | Type | Default | Required |
|------|-----------------------------------------------------|------|---------|:--------:|
| days-before-expiry | ACM DaysBeforeExpiry account configuration | `number` | `45` | no |
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| days-before-expiry | ACM DaysBeforeExpiry account configuration | `number` | `45` | no |
| email-addresses | Set of email addresses to receive SNS notifications | `set(string)` | n/a | yes |
| res-prefix | Resource name prefix | `string` | `"aws"` | no |
| res-prefix | Resource name prefix | `string` | `"aws"` | no |
| sns-kms-key-arn | ARN of KMS key used for SNS encryption | `string` | `null` | no |
## Outputs
@ -79,4 +80,4 @@ No outputs.
---
## Authorship
This module was developed by xpk.
This module was developed by UPDATE_THIS.

4
modules/ManagementGovernance/acm-cert-expiry-notice/main.tf
View File

@ -45,8 +45,8 @@ module "awscli" {
# SNS topic and subscription
resource "aws_sns_topic" "ssl-cert-expiry-notice" {
name = "${var.res-prefix}-ssl-cert-expiry-notice-${random_id.this.dec}"
# kms_master_key_id = "alias/aws/sns"
name = "${var.res-prefix}-ssl-cert-expiry-notice-${random_id.this.dec}"
kms_master_key_id = var.sns-kms-key-arn
}
resource "aws_sns_topic_policy" "default" {

5
modules/ManagementGovernance/acm-cert-expiry-notice/variables.tf
View File

@ -15,3 +15,8 @@ variable "res-prefix" {
default = "aws"
}
variable "sns-kms-key-arn" {
type = string
description = "ARN of KMS key used for SNS encryption"
default = null
}