-
Notifications
You must be signed in to change notification settings - Fork 9.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update aws_dynamodb_table.server_side_encryption documentation noting DEFAULT encryption type #7499
Conversation
… DEFAULT encryption type.
Replaces #5666. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hey @ewbankkit -- this is great information to update. Thanks for spending the time to look into it. To reduce some confusion, maybe we could:
- Update the
server_side_encryption
argument to state that AWS DynamoDB tables are automatically encrypted at rest with an AWS owned CMK and the configuration block controls options beyond that - Update the
enabled
argument (right above this note) to include the bits being added in this note and maybe link out to https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html to help clarify the difference between AWS owned and managed CMKs
What do you think?
@bflad I made the suggested changes which hopefully clarify the default value of AWS DynamoDB table server-side encryption. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks awesome! Thanks, @ewbankkit! 🚀
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks! |
Fixes #7498.
No applicable acceptance tests.