Added kms_key_id parameter

main.tf

@@ -40,6 +40,7 @@ module "db_instance" {
   allocated_storage = "${var.allocated_storage}"
   storage_type      = "${var.storage_type}"
   storage_encrypted = "${var.storage_encrypted}"
+  kms_key_id        = "${var.kms_key_id}"
 
   name     = "${var.name}"
   username = "${var.username}"

modules/db_instance/main.tf

@@ -10,6 +10,7 @@ resource "aws_db_instance" "this" {
   allocated_storage = "${var.allocated_storage}"
   storage_type      = "${var.storage_type}"
   storage_encrypted = "${var.storage_encrypted}"
+  kms_key_id        = "${var.kms_key_id}"
 
   name     = "${var.name}"
   username = "${var.username}"

modules/db_instance/variables.tf

@@ -16,6 +16,11 @@ variable "storage_encrypted" {
   default     = false
 }
 
+variable "kms_key_id" {
+  description = "The ARN for the KMS encryption key. If creating an encrypted replica, set this to the destination KMS ARN."
+  default = ""
+}
+
 variable "engine" {
   description = "The database engine to use"
 }

variables.tf

@@ -16,6 +16,11 @@ variable "storage_encrypted" {
   default     = false
 }
 
+variable "kms_key_id" {
+  description = "The ARN for the KMS encryption key. If creating an encrypted replica, set this to the destination KMS ARN."
+  default = ""
+}
+
 variable "engine" {
   description = "The database engine to use"
 }