hashicorp / terraform-aws-vault

A Terraform Module for how to run Vault on AWS using Terraform and Packer
Apache License 2.0
656 stars 465 forks source link

Add kms key creation for vault auto unseal #258

Open itzkumaran opened 2 years ago

itzkumaran commented 2 years ago

Description

As of today, the KMS key creation process is manual outside the scope of the example - vault-auto-unseal and we are trying to bring this into Terraform. This adds Terraform source code for creating a KMS key for auto-unseal to work. This also provides a KMS key replication to another region.

Documentation

We have updated the documentation inside examples/vault-auto-unseal/README.md

TODOs

Please ensure all of these TODOs are completed before asking for a review.

Related Issues

Addresses #257

hashicorp-cla commented 2 years ago

CLA assistant check
All committers have signed the CLA.