# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
# SPDX-License-Identifier: Apache-2.0
AWSTemplateFormatVersion: "2010-09-09"
Description:  "KMS Key for drs-plan-automation Related AWS resources"
Resources:
  KMSKey:
    Type: AWS::KMS::Key
    Properties:
      Description: "KMS Key used by drs-plan-automation related AWS services"
      Enabled: true
      EnableKeyRotation: true
      KeyPolicy:
        Version: '2012-10-17'
        Id: "key-default-1"
        Statement:
          -
            Sid: "Enable IAM User Permissions"
            Effect: "Allow"
            Principal:
              AWS:
                - !Sub "arn:aws:iam::${AWS::AccountId}:root"
            Action: 'kms:*'
            Resource: '*'

Outputs:
  KmsKeyArn:
    Value: !GetAtt [ 'KMSKey', 'Arn' ]
    Description: "KMS Key Arn for drs-plan-automation related AWS resources"
    Export:
      Name: "drs-kms-key-arn"

  KmsKeyID:
    Value: !Ref KMSKey
    Description: "KMS Key ID for drs-plan-automation related AWS resources"
    Export:
      Name: "drs-kms-id"