CODEWITHSUNDEEP
aws-cloudformationamazon-kms
aerioeus
aerioeus

Reputation: 1410

Create a KMS custom Key in CloudFormation template for different region

Is there any way to generate a custom KMS Key via CloudFormation template in a different region than the region which is specified in the respective AWS User account you use to run the template?

Merci A

Upvotes: 1

Views: 1425

Answers (1)

Laurent Jalbert Simard
Laurent Jalbert Simard

Reputation: 6339

Short answer:

No, not directly.

Long answer:

It can actually be done in one of two ways. First, using StackSets, you can create a single template that will be deployed in selected accounts (1 in this occurence) and regions.

The second way to achieve your goal is to use a Custom Resource to create your KMS keys in other regions. This custom resource will invoke a Lambda function to handle the lifecycle of your KMS keys. Within this Lambda you will have to call the appropriate APIs to create/update/delete the KMS keys in the desired region.

Upvotes: 1

Related Questions