Port ashok's changes

dominodatalab · Jan 31, 2025 · 7cfcefc · 7cfcefc
1 parent e3f0603
commit 7cfcefc
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/modules/infra/submodules/cost-usage-report/glue.tf b/modules/infra/submodules/cost-usage-report/glue.tf
@@ -15,17 +15,17 @@ resource "aws_glue_security_configuration" "lambda_config" {
 
   encryption_configuration {
     cloudwatch_encryption {
-      cloudwatch_encryption_mode = "SSE-KMS"
+      cloudwatch_encryption_mode = var.kms_info.enabled ? "SSE-KMS" : "DISABLED"
       kms_key_arn                = local.kms_key_arn
     }
 
     job_bookmarks_encryption {
-      job_bookmarks_encryption_mode = "CSE-KMS"
+      job_bookmarks_encryption_mode = var.kms_info.enabled ? "CSE-KMS" : "DISABLED"
       kms_key_arn                   = local.kms_key_arn
     }
 
     s3_encryption {
-      s3_encryption_mode = "SSE-KMS"
+      s3_encryption_mode = var.kms_info.enabled ? "SSE-KMS" : "SSE-S3"
       kms_key_arn        = local.kms_key_arn
     }
   }
@@ -117,7 +117,7 @@ resource "aws_athena_workgroup" "athena_work_group" {
       output_location = "s3://${aws_s3_bucket.athena_result.bucket}/"
 
       encryption_configuration {
-        encryption_option = "SSE_KMS"
+        encryption_option = var.kms_info.enabled ? "SSE_KMS" : "SSE_S3"
         kms_key_arn       = local.kms_key_arn
       }
     }
@@ -137,4 +137,4 @@ resource "aws_vpc_endpoint" "aws_glue_vpc_endpoint" {
   tags = {
     "Name" = "${var.deploy_id}-glue"
   }
-}
+}