Adding S3 KMS as encryption option for S3 SCP

trussworks · Oct 7, 2020 · cea5d5b · cea5d5b
1 parent 3f62d76
commit cea5d5b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -239,7 +239,7 @@ data "aws_iam_policy_document" "combined_policy_block" {
       condition {
         test     = "StringNotEquals"
         variable = "s3:x-amz-server-side-encryption"
-        values   = ["AES256"]
+        values   = ["AES256", "aws:kms"]
       }
     }
   }