data "aws_kms_key" "backup" {
  key_id = "alias/aws/backup"
}

data "aws_caller_identity" "current" {
}

data "aws_kms_key" "ebs" {
  key_id = "alias/aws/ebs"
}

resource "aws_ebs_default_kms_key" "default" {
  key_arn = data.aws_kms_key.ebs.arn
}

resource "aws_ebs_encryption_by_default" "default" {
  enabled = true
}