Using `encrypted` to set the db_instance.storage_encrypted

main.tf

@@ -39,6 +39,7 @@ module "db_instance" {
   instance_class    = "${var.instance_class}"
   allocated_storage = "${var.allocated_storage}"
   storage_type      = "${var.storage_type}"
+  storage_encrypted = "${var.storage_encrypted}"
 
   name     = "${var.name}"
   username = "${var.username}"

modules/db_instance/main.tf

@@ -9,6 +9,7 @@ resource "aws_db_instance" "this" {
   instance_class    = "${var.instance_class}"
   allocated_storage = "${var.allocated_storage}"
   storage_type      = "${var.storage_type}"
+  storage_encrypted = "${var.storage_encrypted}"
 
   name     = "${var.name}"
   username = "${var.username}"

modules/db_instance/variables.tf

@@ -11,6 +11,11 @@ variable "storage_type" {
   default     = "gp2"
 }
 
+variable "storage_encrypted" {
+  description = "Specifies whether the DB instance is encrypted"
+  default     = false
+}
+
 variable "engine" {
   description = "The database engine to use"
 }

variables.tf

@@ -11,6 +11,11 @@ variable "storage_type" {
   default     = "gp2"
 }
 
+variable "storage_encrypted" {
+  description = "Specifies whether the DB instance is encrypted"
+  default     = false
+}
+
 variable "engine" {
   description = "The database engine to use"
 }