# KMS Keys and ECS taskrunner policies.
# We might need to access secrets in another account, so module might need to be updated accordingly

module "kms_secrets_manager" {
  source        = "../../../modules/kms/secrets_kms"
  env_prefix    = lower(var.platform["prefix"])
  project_group = lower(var.platform["name"])
  region        = var.aws_region_id
  common_tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}

data "aws_kms_key" "default_sqs_key" {
  key_id = "arn:aws:kms:us-east-1:${local.account_id}:key/2a0b6ff0-e11a-4c7e-83d8-ba72f96c83a5"
}

data "aws_kms_alias" "default_ebs_key" {
  name = "alias/default_ebs"
}