aws / aws/serverless-application-model
KMSEncryptPolicy cannot be used to encrypt
Open
area/example-needed
area/policy-templates
maintainer/need-response
- Dominant language
- Python
- Stars
- 9.6k
- Forks
- 2.5k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 7
Description
Related to #1186, is the KMSEncryptPolicy policy template actually usable as written? It can't be used to publish KMS-encrypted data to an SNS topic, for example, because KMSEncryptPolicy doesn't include `kms:GenerateDataKey`.
Contributor guide
Assessment
This issue has not been assessed yet.