Add missing kms:* to ElastioAssetAccountDeployer

Veetaha · Veetaha · commit 3025b6dfdb4c · 2025-03-27T14:27:25.000Z
diff --git a/codegen/src/policies/ElastioAssetAccountDeployer.ts b/codegen/src/policies/ElastioAssetAccountDeployer.ts
@@ -16,7 +16,7 @@ export default {
   description: "Permissions required to deploy the Elastio Asset Account stack",
   statements: [
     {
-      Action: ["lambda:*", "cloudformation:*", "logs:*", "ssm:*"],
+      Action: ["lambda:*", "cloudformation:*", "logs:*", "ssm:*", "kms:*"],
       Resource: "*",
     },
     {
diff --git a/iam-policies/terraform/policies/ElastioAssetAccountDeployer.json b/iam-policies/terraform/policies/ElastioAssetAccountDeployer.json
@@ -4,7 +4,7 @@
     "Version": "2012-10-17",
     "Statement": [
       {
-        "Action": ["lambda:*", "cloudformation:*", "logs:*", "ssm:*"],
+        "Action": ["lambda:*", "cloudformation:*", "logs:*", "ssm:*", "kms:*"],
         "Resource": "*",
         "Effect": "Allow"
       },

Original file line number	Diff line number	Diff line change
`@@ -16,7 +16,7 @@ export default {`
`16`	`16`	`description: "Permissions required to deploy the Elastio Asset Account stack",`
`17`	`17`	`statements: [`
`18`	`18`	`{`
`19`		`- Action: ["lambda:", "cloudformation:", "logs:", "ssm:"],`
	`19`	`+ Action: ["lambda:", "cloudformation:", "logs:", "ssm:", "kms:*"],`
`20`	`20`	`Resource: "*",`
`21`	`21`	`},`
`22`	`22`	`{`
Original file line number	Diff line number	Diff line change
`@@ -4,7 +4,7 @@`
`4`	`4`	`"Version": "2012-10-17",`
`5`	`5`	`"Statement": [`
`6`	`6`	`{`
`7`		`- "Action": ["lambda:", "cloudformation:", "logs:", "ssm:"],`
	`7`	`+ "Action": ["lambda:", "cloudformation:", "logs:", "ssm:", "kms:*"],`
`8`	`8`	`"Resource": "*",`
`9`	`9`	`"Effect": "Allow"`
`10`	`10`	`},`