やっていることはこの辺
Simple Cloud KMS module that allows managing a keyring, zero or more keys in the keyring, and IAM role bindings on individual keys. The resources/services/activations/deletions that this module will create/trigger are: Create a KMS keyring in the provided project Create zero or more keys in the keyring Create IAM role bindings for owners, encrypters, decrypters