Merge pull request #7 from yaradigitallabs/DE-3650/redis-enable-encryption-at-rest

DE-3650 Enabling encryption at rest parameter for redis

Author: Sr3yas-sk

main.tf

@@ -23,6 +23,7 @@ resource "aws_elasticache_replication_group" "redis" {
   snapshot_retention_limit   = var.redis_snapshot_retention_limit
   tags                       = merge({ "Name" = format("tf-elasticache-%s", var.name) }, var.tags)
   transit_encryption_enabled = var.transit_encryption_enabled
+  at_rest_encryption_enabled = var.at_rest_encryption_enabled
   auth_token                 = var.transit_encryption_enabled ? var.auth_token : null
 }
 

variables.tf

@@ -128,6 +128,12 @@ variable "transit_encryption_enabled" {
   description = "Enable TLS"
 }
 
+variable "at_rest_encryption_enabled" {
+  type        = bool
+  default     = true
+  description = "Enable encryption at rest"
+}
+
 variable "auth_token" {
   type        = string
   description = "token for password protecting redis, transit_encryption_enabled must`` be set to  `true`. Password must be longer than 16 chars"