From fc1f35e78f3eeb4a5ee86bb1732c2cc79414b03b Mon Sep 17 00:00:00 2001
From: Nick Penaranda <nick.penaranda@wandb.com>
Date: Wed, 17 Jul 2024 20:24:19 -0400
Subject: [PATCH] fix

---
 modules/kms/main.tf    | 4 ++--
 modules/kms/outputs.tf | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/kms/main.tf b/modules/kms/main.tf
index c46651a58..9dfe88cb5 100644
--- a/modules/kms/main.tf
+++ b/modules/kms/main.tf
@@ -138,7 +138,7 @@ resource "aws_kms_alias" "clickhouse_key" {
   count = var.create_clickhouse_key ? 1 : 0
 
   name          = "alias/${var.clickhouse_key_alias}"
-  target_key_id = aws_kms_key.clickhouse_key.key_id
+  target_key_id = aws_kms_key.clickhouse_key[0].key_id
 }
 
 
@@ -146,7 +146,7 @@ resource "aws_kms_grant" "clickhouse" {
   count = var.create_clickhouse_key && (var.iam_principal_arn == "") ? 0 : 1
 
   grantee_principal = var.iam_principal_arn
-  key_id            = aws_kms_key.clickhouse_key.key_id
+  key_id            = aws_kms_key.clickhouse_key[0].key_id
   operations = [
     "Decrypt",
     "DescribeKey",
diff --git a/modules/kms/outputs.tf b/modules/kms/outputs.tf
index 1278a569f..5b09005d1 100644
--- a/modules/kms/outputs.tf
+++ b/modules/kms/outputs.tf
@@ -5,6 +5,6 @@ output "key" {
 
 
 output "clickhouse_key" {
-  value       = aws_kms_key.clickhouse_key
+  value       = var.create_clickhouse_key ? aws_kms_key.clickhouse_key[0] : null
   description = "The KMS key used to encrypt Weave data in Clickhouse."
 }