File tree Expand file tree Collapse file tree 1 file changed +5
-5
lines changed
modules/infra/submodules/cost-usage-report Expand file tree Collapse file tree 1 file changed +5
-5
lines changed Original file line number Diff line number Diff line change @@ -15,17 +15,17 @@ resource "aws_glue_security_configuration" "lambda_config" {
15
15
16
16
encryption_configuration {
17
17
cloudwatch_encryption {
18
- cloudwatch_encryption_mode = " SSE-KMS"
18
+ cloudwatch_encryption_mode = var . kms_info . enabled ? " SSE-KMS" : " DISABLED "
19
19
kms_key_arn = local. kms_key_arn
20
20
}
21
21
22
22
job_bookmarks_encryption {
23
- job_bookmarks_encryption_mode = " CSE-KMS"
23
+ job_bookmarks_encryption_mode = var . kms_info . enabled ? " CSE-KMS" : " DISABLED "
24
24
kms_key_arn = local. kms_key_arn
25
25
}
26
26
27
27
s3_encryption {
28
- s3_encryption_mode = " SSE-KMS"
28
+ s3_encryption_mode = var . kms_info . enabled ? " SSE-KMS" : " SSE-S3 "
29
29
kms_key_arn = local. kms_key_arn
30
30
}
31
31
}
@@ -117,7 +117,7 @@ resource "aws_athena_workgroup" "athena_work_group" {
117
117
output_location = " s3://${ aws_s3_bucket . athena_result . bucket } /"
118
118
119
119
encryption_configuration {
120
- encryption_option = " SSE_KMS"
120
+ encryption_option = var . kms_info . enabled ? " SSE_KMS" : " SSE_S3 "
121
121
kms_key_arn = local. kms_key_arn
122
122
}
123
123
}
@@ -137,4 +137,4 @@ resource "aws_vpc_endpoint" "aws_glue_vpc_endpoint" {
137
137
tags = {
138
138
" Name" = " ${ var . deploy_id } -glue"
139
139
}
140
- }
140
+ }
You can’t perform that action at this time.
0 commit comments