Encrypt RDS and enable Performance Insights
We're encrypting RDS using the default key since our security model
assumes everything is encrypted and its one of our SOC2 controls.
I'm also enabling Perf Insights, since its free and makes it much
easier to debug postgres issues
@@ -144,5 +144,10 @@ class Postgres(pulumi.ComponentResource):
username=username,
password=password.result,
port=postgres_port,
+ # Because we're not specifying a kms key, this will use the default aws/rds key
+ storage_encrypted=True,
+ # Enable performance insights for 7 days, which is free
+ performance_insights_enabled=True,
+ performance_insights_retention_period=7,
opts=child_opts,
)
