Enable bucket key for reducing the cost of SSE-KMS with Amazon S3

[bkmnaidu]

Signed-off-by: Krishna Mohan Bandi [email protected]

what

• Allow S3 bucket key to be enabled to reduce the cost of SSE-KMS usage with Amazon S3

why

• When KMS encryption is enabled for an Amazon S3 bucket, there is a limit on the number of KMS API calls that can be made. Enabling bucket key not only allows to reduce the number of KMS API calls but also reduces the cost of SSE-KMS with Amazon S3.

references

• https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-key.html
• closes Support bucket keys #114

[nitrocode]

/test all

This Pull Request has been updated, so we're dismissing all reviews.

[korenyoni]

I've taken the liberty to update the variable descriptions — there was some unintended repetition and also I just cleaned it up a bit.

Also, looks like you forgot to update examples/complete/main.tf and add the bucket_key_enabled variable in the module invocation. I've taken the liberty to fix this myself — along my feedback on the new variable being put into the wrong tfvars fixture.

[korenyoni]

/test all