resource "aws_kms_key" "kms" {
  description             = "TiDB Cloud uses the KMS key to encrypt-at-rest."
  tags = {
    (var.tags_key) = (var.tags_value)
    }
}

output "arn" {
  value = "${aws_kms_key.kms.arn}"
}