## Requirements | Name | Version | |------|---------| | [terraform](#requirement\_terraform) | >= v1.1.9 | | [aws](#requirement\_aws) | >= 4.13.0 | ## Providers | Name | Version | |------|---------| | [aws.primary](#provider\_aws.primary) | >= 4.13.0 | | [aws.replica](#provider\_aws.replica) | >= 4.13.0 | ## Modules No modules. ## Resources | Name | Type | |------|------| | [aws_kms_alias.kms_alias](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_alias) | resource | | [aws_kms_replica_key.kms_key_replica](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_replica_key) | resource | ## Inputs | Name | Description | Type | Default | Required | |------|-------------|------|---------|:--------:| | [primary\_region](#input\_primary\_region) | The AWS Region e.g. us-east-1 for the primary KMS Key | `string` | n/a | yes | | [replica\_region](#input\_replica\_region) | The AWS Region e.g. us-west-1 where replica will be created | `string` | n/a | yes | | [deletion\_window\_in\_days](#input\_deletion\_window\_in\_days) | The waiting period, after which the AWS KMS deletes the KMS key replica. It must be between 7 and 30. Default is 7. | `number` | `7` | no | | [replicas\_to\_create](#input\_replicas\_to\_create) | Map of KMS aliases from Primary region for which replicas to be created in Replica region |
map(object({| `{}` | no | | [tags](#input\_tags) | Common and mandatory tags for the resources | `map(string)` | `{}` | no | ## Outputs | Name | Description | |------|-------------| | [key\_aliases](#output\_key\_aliases) | KMS key replica aliases that are created |
alias = string # Alias for the KMS Key in the primary region
policy = string # Policy for the KMS Key in the primary region, or policy for the replica
}))