chore: Add encryption to CICD SNS topic (#512)

Co-authored-by: Tim Nguyen <thingut@amazon.com>
awslabs · Jun 7, 2021 · a65af01 · a65af01
1 parent 091914c
commit a65af01
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/main/cicd/cicd-pipeline/config/infra/cloudformation.yml b/main/cicd/cicd-pipeline/config/infra/cloudformation.yml
@@ -20,10 +20,12 @@ Resources:
     Type: AWS::SNS::Topic
     Properties: !If
       - SubscribeNotificationEmail
-      - Subscription:
+      -
+        Subscription:
           - Endpoint: ${self:custom.settings.emailForNotifications}
             Protocol: email
-      - !Ref AWS::NoValue
+        KmsMasterKeyId: alias/aws/sns
+      - KmsMasterKeyId: alias/aws/sns
 
   # SNS Topic Policy to allow CloudWatch Event Service to send notifications to the topic
   PipelineNotificationsTopicPolicy: