Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Terragrunt with sso profile use wrong setting for s3 backend encryption #2099

Open
nomopo45 opened this issue May 10, 2022 · 1 comment
Open
Labels
bug Something isn't working p:needs triage Needs to be processed by maintainer and issue type / priority added

Comments

@nomopo45
Copy link

Hello,

Terraform v1.1.5
terragrunt version v0.36.1

This is what my backend look like :

remote_state {
  backend = "s3"
  generate = {
    path      = "backend.tf"
    if_exists = "overwrite_terragrunt"
  }
  config = {
    bucket = "terraform-state-test"

    key = "${path_relative_to_include()}/terraform.tfstate"
    region         = "us-east-1"
    profile        = "sso-profile"
    encrypt        = true
    kms_key_id     = "arn:aws:kms:us-east-1:1111111111111:key/daaaaaaaa-aaaa-aaaa-aaa2-eeaaaaaaaaa"
    s3_bucket_tags = {
      Manage_By = "Terragrunt"
    }
  }
}

I'm trying to use a custom kms key for my s3 encryption, but on the first run when the bucket is created the kms key used is the default one (arn:aws:kms:us-east-1:1111111111111:alias/aws/s3) instead of the custom one that i set

when i create the bucket with the same profile through the console management it's working fine and i can use my custom kms key, is it a bug or something i'm missing ?

Thank you

@nomopo45 nomopo45 changed the title Terragrunt with sso profile use wrong setting for s3 banckend encryption Terragrunt with sso profile use wrong setting for s3 backend encryption May 10, 2022
@denis256 denis256 added bug Something isn't working p:needs triage Needs to be processed by maintainer and issue type / priority added labels May 11, 2022
@denis256
Copy link
Member

Hello,
looks like a bug, can you try terragrunt v0.37.0 which has updates for the KMS keys application

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working p:needs triage Needs to be processed by maintainer and issue type / priority added
Projects
None yet
Development

No branches or pull requests

2 participants