Merge pull request #17 from StateFarmIns/fix-kms-key-permissions

fix: 🐛 Fix Lambda KMS permissions
StateFarmIns · Dec 14, 2023 · acc023d · acc023d
2 parents bb6b573 + 8d2e6da
commit acc023d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -23,4 +23,6 @@ reports/tarpaulin-report.html
 
 # DrawIO Temp Files
 .$*.bkp
-.$*.dtmp
+.$*.dtmp
+
+sample/
diff --git a/tf-lambda-iam-role.tf b/tf-lambda-iam-role.tf
@@ -43,7 +43,7 @@ data "aws_iam_policy_document" "log_retention" {
   dynamic "statement" {
     for_each = var.kms_key_arn == null ? [] : [var.kms_key_arn]
     content {
-      actions   = ["kms:GenerateDataKey"]
+      actions   = ["kms:Decrypt"]
       resources = [statement.value]
     }
   }