kms-keys: Skip keys already in pending replica deletion state (#1046)

* kms-keys: Skip keys already in pending replica deletion state

Multi-region KMS keys enter state KeyStatePendingReplicaDeletion when
deleted, they should be filtered out in the list operation.

* Filter out PendingReplicaDeletion in the filter state rather than list state

resources/kms-keys.go

@@ -86,6 +86,10 @@ func (e *KMSKey) Filter() error {
  return fmt.Errorf("is already in PendingDeletion state")
  }
 
+ if e.state == "PendingReplicaDeletion" {
+ return fmt.Errorf("is already in PendingReplicaDeletion state")
+ }
+
  if e.manager != nil && *e.manager == kms.KeyManagerTypeAws {
  return fmt.Errorf("cannot delete AWS managed key")
  }