github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/ebs/AVD-AWS-0027/Terraform.md (about)

     1  
     2  Enable encryption using customer managed keys
     3  
     4  ```hcl
     5  resource "aws_kms_key" "ebs_encryption" {
     6    enable_key_rotation = true
     7  }
     8  
     9  resource "aws_ebs_volume" "example" {
    10    availability_zone = "us-west-2a"
    11    size              = 40
    12    
    13    kms_key_id = aws_kms_key.ebs_encryption.arn
    14    
    15    tags = {
    16      Name = "HelloWorld"
    17    }
    18  }
    19  ```
    20  
    21  #### Remediation Links
    22   - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ebs_volume#kms_key_id
    23