fix: Default admin permissions for special keys (#24)

Co-authored-by: magreenbaum <magreenbaum>
terraform-aws-modules · Sep 18, 2023 · c975efd · c975efd
1 parent a84cb70
commit c975efd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -140,6 +140,8 @@ data "aws_iam_policy_document" "this" {
         "kms:UntagResource",
         "kms:ScheduleKeyDeletion",
         "kms:CancelKeyDeletion",
+        "kms:ReplicateKey",
+        "kms:ImportKeyMaterial"
       ]
       resources = ["*"]