Skip to content

Commit f4de3e3

Browse files
authored
Add kms:PutPolicy to recommended policy (#94)
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license. Issue #, if available: Description of changes: fixes issue when adding policy to keys ``` Reason: operation error KMS: PutKeyPolicy, https response error StatusCode: 400, RequestID: 1f1f1f1f-ca76-4d28-8238-1f1f1f1f1f1f1f, api error AccessDeniedException: User: arn:aws:sts::xxxxxxxxx:assumed-role/ack-kms-20250110xxxxxxxxx/yyyyyyy is not authorized to perform: kms:PutKeyPolicy on resource: arn:aws:kms:us-west-x:xxxxxx:key/2s2s2s2s2s-1edd-44a6-9ad1-3d3d3d3d3d3d3d because no identity-based policy allows the kms:PutKeyPolicy action ``` By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
1 parent 21c4572 commit f4de3e3

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Diff for: config/iam/recommended-inline-policy

+1
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@
1515
"kms:TagResource",
1616
"kms:UntagResource",
1717
"kms:EnableKeyRotation",
18+
"kms:PutKeyPolicy",
1819
"iam:ListGroups",
1920
"iam:ListRoles",
2021
"iam:ListUsers",

0 commit comments

Comments
 (0)