resource "aws_kms_key" "kms_key" {
  count                   = var.use_service_specific_kms_key ? 1 : 0
  description             = "${var.env}-${var.aws_es_domain_name}"
  enable_key_rotation     = true
  deletion_window_in_days = 30
}

resource "aws_kms_alias" "lambda_kms_alias" {
  count         = var.use_service_specific_kms_key ? 1 : 0
  name          = "alias/${var.env}-${var.aws_es_domain_name}"
  target_key_id = aws_kms_key.kms_key[count.index].key_id
}