add encrypted option to root_block_device

[dinesh-auti]

Description

The root_block_device block in aws_launch_configuration supports an encrypted parameter. This parameter was missing in the dynamic block in the module.
https://www.terraform.io/docs/providers/aws/r/launch_configuration.html#root_block_device

[b-b3rn4rd]

Wondering when this is going to be available? @antonbabenko

[stuart-c]

Hi @antonbabenko do you know when this might be release? I'm really looking forward to being able encrypt root devices...

[antonbabenko]

Finally, I got some free time for terraform-aws-modules. My apologies for the delay!

v3.2.0 has been just released.

Thanks @stuart-c and @b-b3rn4rd for a nudge :)

[b-b3rn4rd]

No problems at all, just in case anyone else is looking to encrypt the root and/or additional volumes with a custom key. You can just provision the following resources to automatically encrypt all EBS volumes by default:

resource "aws_ebs_encryption_by_default" "example" {
  enabled = true
}

resource "aws_ebs_default_kms_key" "example" {
  key_arn = "${data.aws_kms_key.kms_key.arn}"
}

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.