resource "alicloud_kms_instance" "this" {
  payment_type    = "PayAsYouGo"
  product_version = 3
  vpc_id          = alicloud_vpc.this.id
  zone_ids        = [alicloud_vswitch.this.zone_id]
  vswitch_ids     = [alicloud_vswitch.this.id]

  lifecycle {
    ignore_changes = all
  }
}

resource "alicloud_kms_key" "this" {
  dkms_instance_id       = alicloud_kms_instance.this.id
  description            = "${alicloud_kms_instance.this.instance_name}-default-key"
  status                 = "Enabled"
  pending_window_in_days = "7"
}

output "kms_instance_id" {
  value = alicloud_kms_instance.this.id
}

output "kms_default_key_id" {
  value = alicloud_kms_key.this.id
}