Force transit encryption when using authorization_config on efs volumes.

7Factor · Sep 29, 2023 · 9a867df · 9a867df
1 parent 2dd975f
commit 9a867df
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ecs.tf b/ecs.tf
@@ -43,7 +43,7 @@ resource "aws_ecs_task_definition" "main_task" {
       efs_volume_configuration {
         file_system_id          = volume.value.file_system_id
         root_directory          = volume.value.root_directory
-        transit_encryption      = coalesce(volume.value.transit_encryption, "DISABLED")
+        transit_encryption      = coalesce(volume.value.transit_encryption, volume.value.authorization_config != null ? "ENABLED" : "DISABLED")
         transit_encryption_port = volume.value.transit_encryption_port
 
         dynamic "authorization_config" {