Update aws_dynamodb_table.server_side_encryption documentation noting…

… DEFAULT encryption type.
hashicorp · Feb 10, 2019 · 038e5f9 · 038e5f9
1 parent d0edc83
commit 038e5f9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/website/docs/r/dynamodb_table.html.markdown b/website/docs/r/dynamodb_table.html.markdown
@@ -151,6 +151,9 @@ The `timeouts` block allows you to specify [timeouts](https://www.terraform.io/d
 
 * `enabled` - (Required) Whether to enable encryption at rest. If the `server_side_encryption` block is not provided then this defaults to `false`.
 
+~> **Note:** If `enabled` is `false` (or not specified) then server-side encryption is set to AWS owned CMK (shown as `DEFAULT` in the AWS console).
+If `enabled` is `true` then server-side encryption is set to AWS managed CMK (shown as `KMS` in the AWS console).
+
 #### `point_in_time_recovery`
 
 * `enabled` - (Required) Whether to enable point-in-time recovery - note that it can take up to 10 minutes to enable for new tables. If the `point_in_time_recovery` block is not provided then this defaults to `false`.