NRL-1187 pull correct kms key

Author: jackleary

terraform/infrastructure/data.tf

@@ -46,3 +46,7 @@ data "aws_s3_bucket" "source-data-bucket" {
   count  = local.is_dev_env ? 1 : 0
   bucket = "${local.shared_prefix}-source-data-bucket"
 }
+
+data "aws_kms_key" "glue" {
+  count = local.is_dev_env ? 1 : 0
+}

terraform/infrastructure/firehose.tf

@@ -9,5 +9,6 @@ module "firehose__processor" {
   splunk_index           = local.splunk_index
   destination            = "splunk"
   reporting_bucket_arn   = local.reporting_bucket_arn
+  reporting_kms_arn      = local.reporting_kms_arn
   reporting_infra_toggle = local.is_dev_env
 }

terraform/infrastructure/locals.tf

@@ -30,6 +30,7 @@ locals {
 
   # Logic / vars for reporting
   reporting_bucket_arn = local.is_dev_env ? data.aws_s3_bucket.source-data-bucket[0].arn : null
+  reporting_kms_arn    = local.is_dev_env ? data.aws_kms_key.glue[0].arn : null
   firehose_lambda_subscriptions = local.is_dev_env ? [
     module.firehose__processor.firehose_subscription,
     module.firehose__processor.firehose_reporting_subscription

terraform/infrastructure/modules/firehose/locals.tf

@@ -40,11 +40,9 @@ locals {
     firehose_reporting_stream_arn = var.reporting_infra_toggle ? aws_kinesis_firehose_delivery_stream.reporting_stream[0].arn : null
   }
 
-  iam_kms_resources = var.reporting_infra_toggle ? [
+  iam_kms_resources = compact([
     aws_kms_key.firehose.arn,
-    aws_kms_key.glue.arn,
-    ] : [
-    aws_kms_key.firehose.arn,
-  ]
+    data.aws_kms_key.glue.arn
+  ])
 
 }

terraform/infrastructure/modules/firehose/vars.tf

@@ -40,6 +40,11 @@ variable "reporting_bucket_arn" {
   default = null
 }
 
+variable "reporting_kms_arn" {
+  type    = string
+  default = null
+}
+
 variable "reporting_infra_toggle" {
   type = bool
 }