fix: Default admin permissions for special keys (#24)

magreenbaum · web-flow · commit c975efda5686 · 2023-09-18T18:39:07.000-04:00
Co-authored-by: magreenbaum &lt;magreenbaum&gt;
diff --git a/main.tf b/main.tf
@@ -140,6 +140,8 @@ data "aws_iam_policy_document" "this" {
         "kms:UntagResource",
         "kms:ScheduleKeyDeletion",
         "kms:CancelKeyDeletion",
+        "kms:ReplicateKey",
+        "kms:ImportKeyMaterial"
       ]
       resources = ["*"]
 

Original file line number	Diff line number	Diff line change
`@@ -140,6 +140,8 @@ data "aws_iam_policy_document" "this" {`
`140`	`140`	`"kms:UntagResource",`
`141`	`141`	`"kms:ScheduleKeyDeletion",`
`142`	`142`	`"kms:CancelKeyDeletion",`
	`143`	`+ "kms:ReplicateKey",`
	`144`	`+ "kms:ImportKeyMaterial"`
`143`	`145`	`]`
`144`	`146`	`resources = ["*"]`
`145`	`147`