Skip to content

Commit f43ca6b

Browse files
ben-vaughan-nttdaarti-joshi-nttd
ben-vaughan-nttd
and
aarti-joshi-nttd
authored
Initial module for aws_kms_key (#1)
* Initial module for aws_kms_key * Include test with inline policy * Supports all major aws_kms_key resource features in v5.x of the provider * Add GitHub workflows for Dependabot, release drafting, pull request labeling, and Terraform checks * Fix link formatting in release-drafter.yml - v is removed Signed-off-by: Aarti Joshi <[email protected]> --------- Signed-off-by: Aarti Joshi <[email protected]> Co-authored-by: Aarti Joshi <[email protected]>
1 parent c8f1307 commit f43ca6b

32 files changed

+2713
-0
lines changed

‎.github/dependabot.yml‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "github-actions"
4+
directory: "/"
5+
schedule:
6+
interval: "weekly"
7+
- package-ecosystem: "gomod"
8+
directory: "/"
9+
schedule:
10+
interval: "weekly"
11+
- package-ecosystem: "terraform"
12+
directory: "/"
13+
schedule:
14+
interval: "weekly"

‎.github/release-drafter.yml‎

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
---
2+
name-template: "$RESOLVED_VERSION"
3+
tag-template: "$RESOLVED_VERSION"
4+
template: |
5+
# Changelog
6+
7+
$CHANGES
8+
9+
---
10+
11+
See details of [all code changes](https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...$RESOLVED_VERSION) since previous release.
12+
13+
categories:
14+
- title: ":warning: Breaking Changes"
15+
labels:
16+
- "major"
17+
- title: "🚀 Features"
18+
labels:
19+
- "minor"
20+
- title: "🔧 Fixes"
21+
collapse-after: 3
22+
labels:
23+
- "patch"
24+
25+
autolabeler:
26+
- label: "major"
27+
branch:
28+
- '/(patch|bug|fix|feature|chore)!\/.+/'
29+
- label: "minor"
30+
branch:
31+
- '/feature\/.+/'
32+
- label: "patch"
33+
branch:
34+
- '/(patch|bug|fix|chore)\/.+/'
35+
36+
change-template: "- $TITLE @$AUTHOR (#$NUMBER)"
37+
38+
version-resolver:
39+
major:
40+
labels:
41+
- "major"
42+
minor:
43+
labels:
44+
- "minor"
45+
patch:
46+
labels:
47+
- "patch"
48+
- "dependencies"
49+
default: patch

‎.github/workflows/pull-request-label.yml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
name: Label Pull Request
2+
3+
on:
4+
pull_request:
5+
types: [opened, reopened, synchronize]
6+
7+
jobs:
8+
check:
9+
name: "Label Pull Request"
10+
permissions:
11+
contents: read
12+
issues: write
13+
pull-requests: write
14+
uses: launchbynttdata/launch-workflows/.github/workflows/[email protected]
15+
secrets: inherit # pragma: allowlist secret

‎.github/workflows/pull-request-terraform-check.yml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
name: Check AWS Terraform Code
2+
3+
on:
4+
pull_request:
5+
types: [opened, reopened, synchronize, ready_for_review]
6+
branches: [main]
7+
8+
permissions:
9+
id-token: write
10+
contents: read
11+
12+
jobs:
13+
check:
14+
name: "Check AWS Terraform Code"
15+
permissions:
16+
contents: read
17+
id-token: write
18+
uses: launchbynttdata/launch-workflows/.github/workflows/[email protected]
19+
with:
20+
assume_role_arn: ${{ vars.TERRAFORM_CHECK_AWS_ASSUME_ROLE_ARN }}
21+
region: ${{ vars.TERRAFORM_CHECK_AWS_REGION }}
22+
secrets: inherit # pragma: allowlist secret

‎.github/workflows/release-publish.yml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: Publish Release
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
8+
permissions:
9+
contents: read
10+
11+
jobs:
12+
release-on-merge:
13+
name: "Create and Publish Release on Merge"
14+
permissions:
15+
contents: write
16+
pull-requests: write
17+
uses: launchbynttdata/launch-workflows/.github/workflows/[email protected]
18+
secrets: inherit # pragma: allowlist secret

‎.gitignore‎

Lines changed: 77 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,77 @@
1+
terraform.*
2+
.repo/
3+
components/
4+
.semverbot.toml
5+
.tflint.hcl
6+
.golangci.yaml
7+
8+
.idea
9+
!examples/*.tfvars
10+
11+
# We don't want to commit the test run lock files
12+
.terraform.lock.hcl
13+
14+
# Don't include the .test-data directory created by Terratest's test-structure module
15+
**/.test-data/*
16+
17+
# Local .terraform directories
18+
**/.terraform/*
19+
20+
# Local .terragrunt directories
21+
**/.terragrunt/*
22+
23+
# .tfstate files
24+
*.tfstate
25+
*.tfstate.*
26+
27+
# tfplan files
28+
*.tfplan
29+
30+
# Crash log files
31+
crash.log
32+
crash.*.log
33+
34+
# Exclude all .tfvars files, which are likely to contain sensitive data, such as
35+
# password, private keys, and other secrets. These should not be part of version
36+
# control as they are data points which are potentially sensitive and subject
37+
# to change depending on the environment.
38+
*.tfvars.json
39+
*.auto.tfvars
40+
41+
# Ignore override files as they are usually used to override resources locally and so
42+
# are not checked in
43+
override.tf
44+
override.tf.json
45+
*_override.tf
46+
*_override.tf.json
47+
provider.tf
48+
49+
# Include override files you do wish to add to version control using negated pattern
50+
# !example_override.tf
51+
52+
# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
53+
# example: *tfplan*
54+
55+
# Ignore CLI configuration files
56+
.terraformrc
57+
terraform.rc
58+
59+
# Files from common modules
60+
azure_env.sh
61+
.releaserc.json
62+
.tflint.hcl
63+
64+
# Pre-commit hook
65+
.pre-commit-config.yaml
66+
67+
# VS Code
68+
.vscode/
69+
70+
# Layer build files
71+
**/build/
72+
**/builds/
73+
**/lambda_layer
74+
**/lambda_layer.zip
75+
**/*.egg-info
76+
77+
vendor/

‎.lcafenv‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# Use this file to preset variables used by the Makefile.
2+
# This file will be included when make is run. The variables below will
3+
# take precedence over what is defined in Makefile when they are set. This
4+
# allows overriding certain settings without modifying the Makefile.
5+
6+
# REPO_MANIFESTS_URL="https://github.com/launchbynttdata/launch-common-automation-framework.git"
7+
# REPO_BRANCH="refs/tags/1.0.0"
8+
# REPO_MANIFEST="manifests/terraform_modules/seed/manifest.xml"
9+
# REPO_URL="https://github.com/launchbynttdata/git-repo.git"
10+
# REPO_REV="main"
11+
# GITBASE="https://github.com/launchbynttdata/"
12+
# GITREV="main"
13+
# IS_PIPELINE="false"
14+
# IS_AUTHENTICATED="false"
15+
# JOB_NAME="job"
16+
# JOB_EMAIL="[email protected]"
17+
# PLATFORM_VER=
18+
# CONTAINER_VER=
19+
# PIPELINES_VER=
20+
# WEBHOOK_VER=
21+
# PYTHON_VER=
22+
# TERRAGRUNT_VER=
23+
# TERRAFORM_VER=

‎.secrets.baseline‎

Lines changed: 112 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,112 @@
1+
{
2+
"version": "1.5.44",
3+
"plugins_used": [
4+
{
5+
"name": "ArtifactoryDetector"
6+
},
7+
{
8+
"name": "AWSKeyDetector"
9+
},
10+
{
11+
"name": "AzureStorageKeyDetector"
12+
},
13+
{
14+
"name": "Base64HighEntropyString",
15+
"limit": 4.5
16+
},
17+
{
18+
"name": "BasicAuthDetector"
19+
},
20+
{
21+
"name": "CloudantDetector"
22+
},
23+
{
24+
"name": "DiscordBotTokenDetector"
25+
},
26+
{
27+
"name": "GitHubTokenDetector"
28+
},
29+
{
30+
"name": "HexHighEntropyString",
31+
"limit": 3.0
32+
},
33+
{
34+
"name": "IbmCloudIamDetector"
35+
},
36+
{
37+
"name": "IbmCosHmacDetector"
38+
},
39+
{
40+
"name": "JwtTokenDetector"
41+
},
42+
{
43+
"name": "KeywordDetector",
44+
"keyword_exclude": ""
45+
},
46+
{
47+
"name": "MailchimpDetector"
48+
},
49+
{
50+
"name": "NpmDetector"
51+
},
52+
{
53+
"name": "PrivateKeyDetector"
54+
},
55+
{
56+
"name": "SendGridDetector"
57+
},
58+
{
59+
"name": "SlackDetector"
60+
},
61+
{
62+
"name": "SoftlayerDetector"
63+
},
64+
{
65+
"name": "SquareOAuthDetector"
66+
},
67+
{
68+
"name": "StripeDetector"
69+
},
70+
{
71+
"name": "TwilioKeyDetector"
72+
}
73+
],
74+
"filters_used": [
75+
{
76+
"path": "detect_secrets.filters.allowlist.is_line_allowlisted"
77+
},
78+
{
79+
"path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
80+
"min_level": 2
81+
},
82+
{
83+
"path": "detect_secrets.filters.heuristic.is_indirect_reference"
84+
},
85+
{
86+
"path": "detect_secrets.filters.heuristic.is_likely_id_string"
87+
},
88+
{
89+
"path": "detect_secrets.filters.heuristic.is_lock_file"
90+
},
91+
{
92+
"path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
93+
},
94+
{
95+
"path": "detect_secrets.filters.heuristic.is_potential_uuid"
96+
},
97+
{
98+
"path": "detect_secrets.filters.heuristic.is_prefixed_with_dollar_sign"
99+
},
100+
{
101+
"path": "detect_secrets.filters.heuristic.is_sequential_string"
102+
},
103+
{
104+
"path": "detect_secrets.filters.heuristic.is_swagger_file"
105+
},
106+
{
107+
"path": "detect_secrets.filters.heuristic.is_templated_secret"
108+
}
109+
],
110+
"results": {},
111+
"generated_at": "2025-10-27T16:34:35Z"
112+
}

‎.tool-versions‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
conftest 0.56.0
2+
golang 1.24.2
3+
golangci-lint 2.2.1
4+
pre-commit 4.2.0
5+
regula 3.2.1 # https://github.com/launchbynttdata/asdf-regula
6+
terraform 1.10.3
7+
terraform-docs 0.20.0
8+
terragrunt 0.77.22
9+
tflint 0.57.0

‎CODEOWNERS‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
* @launchbynttdata/terraform-administrators

0 commit comments

Comments
 (0)