toolkit: allow customizing bucket encryption in toolkit bucket

[cybergoof]

Request that when running cdk deploy, that s3 bucket name and --sse/--sse-kms-key-id be optional parameters. I need the ability to specify how the Cloudformation template is stored in the staging S3.

[eladb]

Renamed to reflect the intent rather mechanism

[Obirah]

Hi, any news on this topic? We also need this feature badly for our enterprise environment.

[hoegertn]

Hi, I can see if I can implement this. @eladb Any special wishes what to do and what not to do?

[uncledru]

Any update on this?

I see in the docs:

cdk bootstrap
cdk bootstrap [ENVIRONMENTS..]

Deploys the CDK toolkit stack into an AWS environment

Options:
  --bootstrap-bucket-name, -b,              The name of the CDK toolkit bucket
  --toolkit-bucket-name                                                 [string]
  --bootstrap-kms-key-id                    AWS KMS master key ID used for the
                                            SSE-KMS encryption          [string]
  --tags, -t                                Tags to add for the stack
                                            (KEY=VALUE)    [array] [default: []]
  --execute                                 Whether to execute ChangeSet
                                            (--no-execute will NOT execute the
                                            ChangeSet) [boolean] [default: true]

Looks like we can pass a KMS key to the bootstrap command but then deploy doesn't use it? Not sure if I'm missing something obvious here.