Update Policy Master Permissions List (#2742)

Co-authored-by: nia-vf1 <[email protected]>
flexera-public · Oct 10, 2024 · 152ea37 · 152ea37
1 parent 5ce80c3
commit 152ea37
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/data/policy_permissions_list/master_policy_permissions_list.json b/data/policy_permissions_list/master_policy_permissions_list.json
@@ -2665,12 +2665,14 @@
             {
               "name": "kms:CreateGrant",
               "read_only": true,
-              "required": true
+              "required": false,
+              "description": "Only required if using Customer Managed KMS Key on Volumes mounted by EC2 Instance(s)"
             },
             {
               "name": "kms:Decrypt",
               "read_only": true,
-              "required": true
+              "required": false,
+              "description": "Only required if using Customer Managed KMS Key on Volumes mounted by EC2 Instance(s)"
             },
             {
               "name": "ec2:CreateTags",

diff --git a/data/policy_permissions_list/master_policy_permissions_list.yaml b/data/policy_permissions_list/master_policy_permissions_list.yaml
@@ -1528,10 +1528,14 @@
       required: true
     - name: kms:CreateGrant
       read_only: true
-      required: true
+      required: false
+      description: Only required if using Customer Managed KMS Key on Volumes mounted
+        by EC2 Instance(s)
     - name: kms:Decrypt
       read_only: true
-      required: true
+      required: false
+      description: Only required if using Customer Managed KMS Key on Volumes mounted
+        by EC2 Instance(s)
     - name: ec2:CreateTags
       read_only: true
       required: false