[Blueprints, 02-at-scale] KMS Encryption

[carlosrodlop]

Create an external KMS key (like this) and using for encryption on

• EBS: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ebs_default_kms_key
• EFS: https://github.com/terraform-aws-modules/terraform-aws-efs/blob/v1.6.0/examples/complete/main.tf#L31-L32
• Bucket:
  • https://github.com/terraform-aws-modules/terraform-aws-s3-bucket/blob/v4.0.1/examples/complete/main.tf#L147-L148
  • https://github.com/terraform-aws-modules/terraform-aws-s3-bucket/blob/v4.0.1/examples/complete/main.tf#L211-L218
• EKS: https://github.com/terraform-aws-modules/terraform-aws-eks/blob/e6c3e90a0268b05e9a4c6f5e51bbbe593538a696/examples/self_managed_node_group/main.tf#L56-L61