Add kms_key_identifier property to individual pipes and archives

Author: dnno

examples/with-archive/main.tf

@@ -52,9 +52,8 @@ module "eventbridge" {
 module "eventbridge_archive_only" {
   source = "../../"
 
-  create_bus         = false
-  create_archives    = true
-  kms_key_identifier = module.kms.key_id
+  create_bus      = false
+  create_archives = true
 
   archives = {
     "launch-archive-existing-bus" = {
@@ -67,6 +66,7 @@ module "eventbridge_archive_only" {
           "detail-type" : ["EC2 Instance Launch Successful"]
         }
       )
+      kms_key_identifier = module.kms.key_id
     }
   }
 

examples/with-pipes/main.tf

@@ -350,6 +350,25 @@ module "eventbridge" {
   }
 }
 
+module "eventbridge_pipe_only" {
+  source = "../../"
+
+  create_bus = false
+
+  pipes = {
+    "pipe-for-existing-bus" = {
+      source             = aws_sqs_queue.source.arn
+      target             = aws_sqs_queue.target.arn
+      kms_key_identifier = module.kms.key_id
+    }
+
+    tags = {
+      Pipe = "pipe-for-existing-bus"
+    }
+  }
+  depends_on = [aws_cloudwatch_event_bus.existing_bus]
+}
+
 ##################
 # Extra resources
 ##################
@@ -358,6 +377,13 @@ resource "random_pet" "this" {
   length = 2
 }
 
+###############################
+# Event Bus
+###############################
+
+resource "aws_cloudwatch_event_bus" "existing_bus" {
+  name = "${random_pet.this.id}-existing-bus"
+}
 
 ###############################
 # API Destination / Connection

main.tf

@@ -284,13 +284,13 @@ resource "aws_cloudwatch_event_archive" "this" {
 
   region = var.region
 
-  name               = lookup(each.value, "name", each.key)
-  event_source_arn   = try(each.value["event_source_arn"], aws_cloudwatch_event_bus.this[0].arn)
-  kms_key_identifier = var.kms_key_identifier
+  name             = lookup(each.value, "name", each.key)
+  event_source_arn = try(each.value["event_source_arn"], aws_cloudwatch_event_bus.this[0].arn)
 
-  description    = lookup(each.value, "description", null)
-  event_pattern  = lookup(each.value, "event_pattern", null)
-  retention_days = lookup(each.value, "retention_days", null)
+  description        = lookup(each.value, "description", null)
+  event_pattern      = lookup(each.value, "event_pattern", null)
+  retention_days     = lookup(each.value, "retention_days", null)
+  kms_key_identifier = lookup(each.value, "kms_key_identifier", null)
 }
 
 resource "aws_cloudwatch_event_permission" "this" {
@@ -668,7 +668,7 @@ resource "aws_pipes_pipe" "this" {
   source = each.value.source
   target = each.value.target
 
-  kms_key_identifier = var.kms_key_identifier
+  kms_key_identifier = lookup(each.value, "kms_key_identifier", null)
   description        = lookup(each.value, "description", null)
   desired_state      = lookup(each.value, "desired_state", null)