cfn-modules: AWS KMS key (strict)

AWS KMS key with strict access restrictions.

The KMS key is not deleted if you delete the CloudFormation stack to prevent unwanted data loss!

If you look for a KMS key with less strict access check out the kms-key module.

Install

Install Node.js and npm first!

npm i @cfn-modules/kms-key-strict

Usage

---
AWSTemplateFormatVersion: '2010-09-09'
Description: 'cfn-modules example'
Resources:
  Key:
    Type: 'AWS::CloudFormation::Stack'
    Properties:
      Parameters:
        AlertingModule: !GetAtt 'Alerting.Outputs.StackName' # optional
        AdminAccess: !Sub 'arn:aws:iam::${AWS::AccountId}:role/ROLE_NAME' # required
        UseAccess: !Sub 'arn:aws:iam::${AWS::AccountId}:role/ROLE_NAME' # optional
        ServiceAccess: 'NO_SERVICES' # optional
        AliasName: '' # optional
      TemplateURL: './node_modules/@cfn-modules/kms-key-strict/module.yml'

Examples

none

Related modules

• kms-key
• secret

Parameters

Outputs