Using `encrypted` to set the db_instance.storage_encrypted

main.tf

@@ -63,5 +63,7 @@ module "db_instance" {
   backup_retention_period = "${var.backup_retention_period}"
   backup_window           = "${var.backup_window}"
 
+  storage_encrypted = "${var.encrypted}"
+
   tags = "${var.tags}"
 }

modules/db_instance/main.tf

@@ -34,5 +34,7 @@ resource "aws_db_instance" "this" {
   backup_retention_period = "${var.backup_retention_period}"
   backup_window           = "${var.backup_window}"
 
+  storage_encrypted = "${var.storage_encrypted}"
+
   tags = "${merge(var.tags, map("Name", format("%s", var.identifier)))}"
 }

modules/db_instance/variables.tf

@@ -116,3 +116,8 @@ variable "tags" {
   description = "A mapping of tags to assign to all resources"
   default     = {}
 }
+
+variable "storage_encrypted" {
+  description = "Defines if the storage should be encrypted or not"
+  default     = false
+}

variables.tf

@@ -112,6 +112,11 @@ variable "tags" {
   default     = {}
 }
 
+variable "encrypted" {
+  description = "Defines wether this instance should be encrypted or not"
+  default     = false
+}
+
 # DB subnet group
 variable "subnet_ids" {
   type        = "list"