Enable encyption_config in EKS Cluster Creation (secrets using KMS at rest - on etcd -)

[omerfsen]

Have a question? Please checkout our Slack Community or visit our Slack Archive.

Describe the Feature

aws_eks_cluster now support Encryption Config to use KMS on Secrets on rest (etcd)

Expected Behavior

To have:

  cluster_encryption_config = [
    {
      provider_key_arn = aws_kms_key.eks.arn
      resources        = ["secrets"]
    }
  ]

Use Case

https://aws.amazon.com/blogs/containers/using-eks-encryption-provider-support-for-defense-in-depth/

Describe Ideal Solution

A clear and concise description of what you want to happen. If you don't know, that's okay.

Alternatives Considered

Explain what alternative solutions or features you've considered.

Additional Context

Add any other context or screenshots about the feature request here.