resource "aws_kms_key" "iac" {
  description = "IaC secrets encryption key"
}

resource "aws_kms_alias" "iac" {
  target_key_id = aws_kms_key.iac.key_id
  name          = "alias/${var.kms_alias}"
}