chore: Add encryption to CICD SNS topic (#512)

Co-authored-by: Tim Nguyen <thingut@amazon.com>
awslabs · Jun 14, 2021 · f23a877 · f23a877
1 parent f69225f
commit f23a877
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/main/cicd/cicd-pipeline/config/infra/cloudformation.yml b/main/cicd/cicd-pipeline/config/infra/cloudformation.yml
@@ -20,10 +20,12 @@ Resources:
     Type: AWS::SNS::Topic
     Properties: !If
       - SubscribeNotificationEmail
-      - Subscription:
+      -
+        Subscription:
           - Endpoint: ${self:custom.settings.emailForNotifications}
             Protocol: email
-      - !Ref AWS::NoValue
+        KmsMasterKeyId: alias/aws/sns
+      - KmsMasterKeyId: alias/aws/sns
 
   # SNS Topic Policy to allow CloudWatch Event Service to send notifications to the topic
   PipelineNotificationsTopicPolicy: