add kms-keys.tf

ministryofjustice · Jan 22, 2024 · 0399448 · 0399448
1 parent 8b0d563
commit 0399448
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/terraform/aws/analytical-platform-development/sagemaker/kms-keys.tf b/terraform/aws/analytical-platform-development/sagemaker/kms-keys.tf
@@ -0,0 +1,8 @@
+##################################################
+# EKS Encryption Key
+##################################################
+
+resource "aws_kms_key" "eks" {
+  description         = "EKS Secret Encryption Key"
+  enable_key_rotation = true
+}
diff --git a/terraform/aws/analytical-platform-development/sagemaker/sagemaker.tf b/terraform/aws/analytical-platform-development/sagemaker/sagemaker.tf
@@ -1,6 +1,9 @@
 resource "aws_sagemaker_domain" "studio_domain" {
   domain_name = var.domain_name
-  auth_mode   = var.auth_mode
+  auth_mode   = var.auth_mode #
+
+  # KMS customer managed key for encryption of EFS
+  kms_key_id = aws_kms_key.sagemaker_cmk.key_id
 
   default_space_settings {
     execution_role = aws_iam_role.sagemaker_studio_execution_role.arn