resource "aws_kms_key" "microservice" { description = "Key for legacy microservice secret encryption/decryption" is_enabled = true } resource "aws_kms_alias" "microservice_kms_alias" { name = "alias/microservice" target_key_id = "${aws_kms_key.microservice.key_id}" }