Merge pull request #2 from lablabs/backup-copy-issue

Missing kms action
lablabs · Mar 6, 2023 · b8d1ff3 · b8d1ff3
2 parents 17874b1 + 1b6d91b
commit b8d1ff3
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/kms.tf b/kms.tf
@@ -66,7 +66,8 @@ data "aws_iam_policy_document" "kms_source_policy" {
       "kms:Decrypt",
       "kms:ReEncrypt*",
       "kms:GenerateDataKey*",
-      "kms:DescribeKey"
+      "kms:DescribeKey",
+      "kms:CreateGrant"
     ]
 
     #checkov:skip=CKV_AWS_109
@@ -109,7 +110,8 @@ data "aws_iam_policy_document" "kms_target_policy" {
       "kms:Decrypt",
       "kms:ReEncrypt*",
       "kms:GenerateDataKey*",
-      "kms:DescribeKey"
+      "kms:DescribeKey",
+      "kms:CreateGrant"
     ]
 
     #checkov:skip=CKV_AWS_109