flosell / flosell/trailscraper
Distinguish between kms:ReEncryptFrom and kms:ReEncryptTo when finding kms:ReEncrypt
Open
bug
generate-feature
- Dominant language
- Python
- Stars
- 838
- Forks
- 38
- Avg merge
- 2m
- Merged PRs (30d)
- 14
Description
The KMS `ReEncrypt` API call has special IAM behavior, it maps to `kms:ReEncryptFrom` or `kms:ReEncryptTo`: https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html
Currently, we map to `kms:ReEncrypt*`, which is not precise. Try to figure out from other CloudTrail information what the right action is
Contributor guide
Assessment
This issue has not been assessed yet.