feat: adding rds disk encryption option

lib/aws/services/mongodb/main.j2.tf

@@ -90,6 +90,7 @@ resource "aws_docdb_cluster" "documentdb_cluster" {
   master_username = var.username
   engine = "docdb"
   {%- endif %}
+  storage_encrypted = var.encrypt_disk
 
   # Network
   db_subnet_group_name = data.aws_subnet_ids.k8s_subnet_ids.id

lib/aws/services/mongodb/variables.j2.tf

@@ -34,4 +34,10 @@ variable "password" {
   description = "Admin password for the master DB user"
   default = "{{ database_password }}"
   type = string
+}
+
+variable "encrypt_disk" {
+  description = "Enable disk encryption"
+  default = "{{ encrypt_disk }}"
+  type = string
 }

lib/aws/services/mysql/main.j2.tf

@@ -87,6 +87,7 @@ resource "aws_db_instance" "mysql_instance" {
   password = var.password
   name = var.database_name
   parameter_group_name = aws_db_parameter_group.mysql_parameter_group.name
+  storage_encrypted = var.encrypt_disk
   {%- if snapshot is defined and snapshot["snapshot_id"] %}
   # Snapshot
   snapshot_identifier = var.snapshot_identifier

lib/aws/services/mysql/variables.j2.tf

@@ -36,6 +36,12 @@ variable "storage_type" {
   type = string
 }
 
+variable "encrypt_disk" {
+  description = "Enable disk encryption"
+  default = "{{ encrypt_disk }}"
+  type = string
+}
+
 variable "instance_class" {
   description = "Type of instance: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html"
   default = "{{database_instance_type}}"

lib/aws/services/postgresql/main.j2.tf

@@ -73,6 +73,7 @@ resource "aws_db_instance" "postgresql_instance" {
     delete = "60m"
   }
   password = var.password
+  storage_encrypted = var.encrypt_disk
   {%- if snapshot and snapshot["snapshot_id"] %}
   # Snapshot
   snapshot_identifier = var.snapshot_identifier

lib/aws/services/postgresql/variables.j2.tf

@@ -30,6 +30,12 @@ variable "storage_type" {
   type = string
 }
 
+variable "encrypt_disk" {
+  description = "Enable disk encryption"
+  default = "{{ encrypt_disk }}"
+  type = string
+}
+
 variable "instance_class" {
   description = "Type of instance: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html"
   default = "{{ database_instance_type }}"