feat: Enable encrypt function on EFS (#296)

Author: titanlien

README.md

@@ -359,6 +359,7 @@ allow_github_webhooks = true
 | <a name="input_ecs_service_platform_version"></a> [ecs\_service\_platform\_version](#input\_ecs\_service\_platform\_version) | The platform version on which to run your service | `string` | `"LATEST"` | no |
 | <a name="input_ecs_task_cpu"></a> [ecs\_task\_cpu](#input\_ecs\_task\_cpu) | The number of cpu units used by the task | `number` | `256` | no |
 | <a name="input_ecs_task_memory"></a> [ecs\_task\_memory](#input\_ecs\_task\_memory) | The amount (in MiB) of memory used by the task | `number` | `512` | no |
+| <a name="input_efs_file_system_encrypted"></a> [efs\_file\_system\_encrypted](#input\_efs\_file\_system\_encrypted) | If true, the disk will be encrypted. | `bool` | `false` | no |
 | <a name="input_efs_file_system_token"></a> [efs\_file\_system\_token](#input\_efs\_file\_system\_token) | Be able to import other EFS instance created by the other module | `string` | `""` | no |
 | <a name="input_enable_ecs_managed_tags"></a> [enable\_ecs\_managed\_tags](#input\_enable\_ecs\_managed\_tags) | Specifies whether to enable Amazon ECS managed tags for the tasks within the service | `bool` | `false` | no |
 | <a name="input_enable_ephemeral_storage"></a> [enable\_ephemeral\_storage](#input\_enable\_ephemeral\_storage) | Enable to use Fargate Ephemeral Storage | `bool` | `false` | no |

main.tf

@@ -447,6 +447,8 @@ resource "aws_efs_file_system" "this" {
  count = var.enable_ephemeral_storage ? 0 : 1
 
  creation_token = coalesce(var.efs_file_system_token, var.name)
+
+ encrypted = var.efs_file_system_encrypted
 }
 
 resource "aws_efs_mount_target" "this" {

variables.tf

@@ -701,6 +701,12 @@ variable "ephemeral_storage_size" {
  }
 }
 
+variable "efs_file_system_encrypted" {
+ description = "If true, the disk will be encrypted."
+ type = bool
+ default = false
+}
+
 variable "efs_file_system_token" {
  description = "Be able to import other EFS instance created by the other module"
  type = string