Merge pull request #74 from HicResearch/73-errors-while-deploying-egr…

…ess-backend-app adding permissions
HicResearch · May 26, 2022 · b0956dd · b0956dd
2 parents 3e9f04d + b56433f
commit b0956dd
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/src/components/egress_app_backend/egress_backend/egress_backend_stack.py b/src/components/egress_app_backend/egress_backend/egress_backend_stack.py
@@ -162,6 +162,22 @@ def __init__(
             )
         )
 
+        sns_kms_key.add_to_resource_policy(
+            iam.PolicyStatement(
+                effect=iam.Effect.ALLOW,
+                principals=[
+                    iam.ServicePrincipal("ses.amazonaws.com"),
+                ],
+                resources=[
+                    "*",
+                ],
+                actions=[
+                    "kms:GenerateDataKey*",
+                    "kms:Decrypt",
+                ],
+            )
+        )
+
         # Custom resource to handle email identity verification
         ses_sender_email_verification = EmailIdentityVerificationCustomResource(
             self,