encrypt dead letter queue

ministryofjustice · Nov 22, 2024 · 2f76c6b · 2f76c6b
1 parent 5feb1e9
commit 2f76c6b
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/terraform/environment/region/modules/event_received/main.tf b/terraform/environment/region/modules/event_received/main.tf
@@ -81,10 +81,10 @@ data "aws_iam_policy_document" "receive_events_queue_policy" {
 
 #tfsec:ignore:aws-sqs-enable-queue-encryption:exp:2024-11-24
 resource "aws_sqs_queue" "receive_events_deadletter" {
-  name = "${data.aws_default_tags.current.tags.environment-name}-receive-events-deadletter"
-  # kms_master_key_id                 = data.aws_kms_alias.sqs.target_key_id
-  # kms_data_key_reuse_period_seconds = 300
-  provider = aws.region
+  name                              = "${data.aws_default_tags.current.tags.environment-name}-receive-events-deadletter"
+  kms_master_key_id                 = data.aws_kms_alias.event_received_sqs.target_key_id
+  kms_data_key_reuse_period_seconds = 300
+  provider                          = aws.region
 }
 
 resource "aws_sqs_queue_redrive_allow_policy" "receive_events_redrive_allow_policy" {