diff --git a/modules/bigtable-instance/README.md b/modules/bigtable-instance/README.md
index 05dcbdde..42ad0975 100644
--- a/modules/bigtable-instance/README.md
+++ b/modules/bigtable-instance/README.md
@@ -230,15 +230,16 @@ module "bigtable-instance" {
| name | description | type | required | default |
|---|---|:---:|:---:|:---:|
| [clusters](variables.tf#L17) | Clusters to be created in the BigTable instance. Set more than one cluster to enable replication. If you set autoscaling, num_nodes will be ignored. | map(object({…}))
| ✓ | |
-| [name](variables.tf#L81) | The name of the Cloud Bigtable instance. | string
| ✓ | |
-| [project_id](variables.tf#L86) | Id of the project where datasets will be created. | string
| ✓ | |
+| [name](variables.tf#L87) | The name of the Cloud Bigtable instance. | string
| ✓ | |
+| [project_id](variables.tf#L92) | Id of the project where datasets will be created. | string
| ✓ | |
| [default_autoscaling](variables.tf#L33) | Default settings for autoscaling of clusters. This will be the default autoscaling for any cluster not specifying any autoscaling details. | object({…})
| | null
|
| [default_gc_policy](variables.tf#L44) | Default garbage collection policy, to be applied to all column families and all tables. Can be override in the tables variable for specific column families. | object({…})
| | null
|
| [deletion_protection](variables.tf#L56) | Whether or not to allow Terraform to destroy the instance. Unless this field is set to false in Terraform state, a terraform destroy or terraform apply that would delete the instance will fail. | bool
| | true
|
| [display_name](variables.tf#L63) | The human-readable display name of the Bigtable instance. | string
| | null
|
-| [iam](variables.tf#L69) | IAM bindings for topic in {ROLE => [MEMBERS]} format. | map(list(string))
| | {}
|
-| [labels](variables.tf#L75) | Labels to be attached to the instance. | map(string)
| | {}
|
-| [tables](variables.tf#L91) | Tables to be created in the BigTable instance. | map(object({…}))
| | {}
|
+| [encryption_key](variables.tf#L69) | The KMS key id to used for encryption of the Bigtable instance. | string
| | null
|
+| [iam](variables.tf#L75) | IAM bindings for topic in {ROLE => [MEMBERS]} format. | map(list(string))
| | {}
|
+| [labels](variables.tf#L81) | Labels to be attached to the instance. | map(string)
| | {}
|
+| [tables](variables.tf#L97) | Tables to be created in the BigTable instance. | map(object({…}))
| | {}
|
## Outputs
diff --git a/modules/bigtable-instance/main.tf b/modules/bigtable-instance/main.tf
index 309bbb1a..3aafaf26 100644
--- a/modules/bigtable-instance/main.tf
+++ b/modules/bigtable-instance/main.tf
@@ -49,6 +49,7 @@ resource "google_bigtable_instance" "default" {
zone = cluster.value.zone
storage_type = cluster.value.storage_type
num_nodes = cluster.value.num_nodes
+ kms_key_name = var.encryption_key
dynamic "autoscaling_config" {
for_each = cluster.value.autoscaling == null ? [] : [""]
diff --git a/modules/bigtable-instance/variables.tf b/modules/bigtable-instance/variables.tf
index 132d5c2c..ca1fbb0e 100644
--- a/modules/bigtable-instance/variables.tf
+++ b/modules/bigtable-instance/variables.tf
@@ -66,6 +66,12 @@ variable "display_name" {
default = null
}
+variable "encryption_key" {
+ description = "The KMS key id to used for encryption of the Bigtable instance."
+ type = string
+ default = null
+}
+
variable "iam" {
description = "IAM bindings for topic in {ROLE => [MEMBERS]} format."
type = map(list(string))