r/aws_dynamodb_table: Support 11/15/2018 Server-Side Encryption enhancements

[ewbankkit]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Looking at the release notes for AWS SDK v1.15.16:

service/dynamodb: Updates service API and documentation
Added SSESpecification block to update-table command which allows users to modify table Server-> Side Encryption. Added two new fields (SSEType and KMSMasterKeyId) to SSESpecification block used by create-table and update-table commands. Added new SSEDescription Status value UPDATING

Add support for these enhancements to the aws_dynamodb_table resource and data source.

[ewbankkit]

Related:

• vendor: aws/aws-sdk-go@v1.15.16 #5619
• Support encryption at rest for DynamoDB tables #3303
• Feature request: Encryption at rest for DynamoDB #3298

[ewbankkit]

Potentially adapt some refactoring applied in #5508?

[ewbankkit]

Proposed syntax:

Enhance aws_dynamodb_table.server_side_encryption attribute with sse_type and kms_master_key_id nested fields.

For example:

resource "aws_dynamodb_table" "t" {
  name           = "GameScores"

  server_side_encryption {
    enabled           = true
    sse_type          = "KMS"
    kms_master_key_id = "${aws_kms_key.a.id}"
  }
}

[ewbankkit]

After the 11/15/2018 announcement this issue has been re-titled to implement these changes.

[reggielamson]

Do you have a time frame for implementing this by chance?

[ewbankkit]

Closed. Replaced by #7498.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!