[Bug]: DyanmoDB `Table` option `Server Side Encryption` provides no interface to reference the ARN of a KMS `Key` created by Crossplane

[cloudymax]

Is there an existing issue for this?

• [X] I have searched the existing issues

Affected Resource(s)

https://marketplace.upbound.io/providers/upbound/provider-aws-dynamodb/v1.0.0/resources/dynamodb.aws.upbound.io/Table/v1beta1

Resource MRs required to reproduce the bug

See that kmsKeyArn field of Table does not provide an interface which can be used to provide an ARN of an existing resource: https://marketplace.upbound.io/providers/upbound/provider-aws-dynamodb/v1.0.0/resources/dynamodb.aws.upbound.io/Table/v1beta1#doc:spec-forProvider-replica-kmsKeyArn

Steps to Reproduce

Attempt to provide the ARN of a KMS Key managed by Crossplane to the kmsKeyArn filed of a DyanmoDB Table crossplane object.

What happened?

I wanted to create a KMSKey with which to encrypt my DyanmoDB Table that was not the default KMS key for my VPC and there was no way to provide the ARN to the DynamoDB table.

Relevant Error Output Snippet

No response

Crossplane Version

1.14.5

Provider Version

1.0.0

Kubernetes Version

No response

Kubernetes Distribution

No response

Additional Info

No response

[cloudymax]

not resolved but was able to work around this issue by implementing 2 things:

1. Create the DynamoDB Key in a pre-install hook
2. Use a helm lookup function to get the ARN of the Key

[github-actions[bot]]

This provider repo does not have enough maintainers to address every issue. Since there has been no activity in the last 90 days it is now marked as stale. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.

[github-actions[bot]]

This issue is being closed since there has been no activity for 14 days since marking it as stale. If you still need help, feel free to comment or reopen the issue!