terraform-aws-modules/kms

Terraform module to create AWS KMS resources.

Terraform module
AWS
available
Placeholder. This template is not in the library yet. Deploy opens the platform so you can start from your own repository; tell us there if you want this one.
Downloads
152.9M
Version
4.2.2
Published
2026-09-18
License
Apache-2.0
Maintainer
terraform-aws-modules

About

Terraform module to create AWS KMS resources.

Maintained by terraform-aws-modules on the Terraform Registry. Latest version 4.2.2, 152.9M downloads. Requires providers: aws >= 6.28.

Deploy creates a StackGuardian workflow from the module's GitHub repository, pinned to this version. You set the inputs, see the plan, then approve the apply.

Use cases

  • Customer-managed keys with rotation turned on from day one.
  • Secrets referenced by workflows, never stored in repositories.
  • One key and secret layout shared by every environment.

Inputs

No required inputs. Every variable has a default, so the first run works with an empty input form.

41 inputs, 9 outputs in total. The full list, with defaults and descriptions, is on the registry page.

What it creates

  • aws_kms_key
  • aws_kms_alias
  • aws_kms_grant
  • aws_kms_external_key
  • aws_kms_replica_key

How it runs on StackGuardian

Terraform workflow from the module's GitHub repository: plan, policy check, approval, then apply.

Plan
Policy check
Approval
Apply

Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.

Pick a template. Deploy it with guardrails.

Deploy your first templateBrowse templates