From cea5d5b27c8366d4e1f52455a478628511bfa8bf Mon Sep 17 00:00:00 2001
From: Lee Hicks <lee@truss.works>
Date: Wed, 7 Oct 2020 22:15:37 +0000
Subject: [PATCH] Adding S3 KMS as encryption option for S3 SCP

---
 main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/main.tf b/main.tf
index ba190af..5397bbd 100644
--- a/main.tf
+++ b/main.tf
@@ -239,7 +239,7 @@ data "aws_iam_policy_document" "combined_policy_block" {
       condition {
         test     = "StringNotEquals"
         variable = "s3:x-amz-server-side-encryption"
-        values   = ["AES256"]
+        values   = ["AES256", "aws:kms"]
       }
     }
   }