fix(DMVP-2690): Added kms key support

modules/secret/README.md

@@ -51,6 +51,7 @@ No modules.
 
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
+| <a name="input_kms_key_id"></a> [kms\_key\_id](#input\_kms\_key\_id) | ARN or Id of the AWS KMS key to be used to encrypt the secret values in the versions stored in this secret. | `any` | `null` | no |
 | <a name="input_name"></a> [name](#input\_name) | Secret name | `string` | n/a | yes |
 | <a name="input_recovery_window_in_days"></a> [recovery\_window\_in\_days](#input\_recovery\_window\_in\_days) | (Optional) Number of days that AWS Secrets Manager waits before it can delete the secret. This value can be 0 to force deletion without recovery or range from 7 to 30 days. The default value is 30 | `number` | `30` | no |
 | <a name="input_value"></a> [value](#input\_value) | Secret value | `any` | `null` | no |

modules/secret/secret.tf

@@ -8,4 +8,5 @@ resource "aws_secretsmanager_secret_version" "value" {
 
   secret_id     = aws_secretsmanager_secret.secret.id
   secret_string = jsonencode(var.value)
+  kms_key_id    = var.kms_key_id
 }

modules/secret/variables.tf

@@ -9,6 +9,13 @@ variable "value" {
   description = "Secret value"
 }
 
+variable "kms_key_id" {
+  type        = any
+  default     = null
+  description = "ARN or Id of the AWS KMS key to be used to encrypt the secret values in the versions stored in this secret."
+}
+
+
 variable "recovery_window_in_days" {
   type        = number
   default     = 30