diff --git a/aws/elasticache/variables.tf b/aws/elasticache/variables.tf index 9a87ad3a..d0c34f1f 100644 --- a/aws/elasticache/variables.tf +++ b/aws/elasticache/variables.tf @@ -85,10 +85,10 @@ variable "transit_encryption_mode" { type = string default = "required" description = "when migrating from no encryption to encryption, this must be set to 'preferred', then apply changes, then set to 'required'" + validation { condition = contains(["required", "preferred"], var.transit_encryption_mode) error_message = "transit_encryption_mode must be either 'required' or 'preferred'" - } }