Add aliases and tags to KMS keys for easier identification and metrics.

cisagov · Sep 27, 2023 · 33bdfce · 33bdfce
1 parent ddfd21a
commit 33bdfce
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/infrastructure/kms.tf b/infrastructure/kms.tf
@@ -2,6 +2,7 @@ resource "aws_kms_key" "key" {
   description             = "KMS key"
   deletion_window_in_days = 10
   enable_key_rotation     = true
+  alias                   = "${var.project}-${var.stage}-key"
   policy                  = <<EOF
 {
     "Version": "2012-10-17",