Skip to content

Commit 6fcdda3

Browse files
committed
fix(kms_key_policy): add dynamic block for deploy role /2
- unique SID
1 parent 8b0a19b commit 6fcdda3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

main.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,7 @@ data "aws_iam_policy_document" "kms_key_policy" {
146146
dynamic "statement" {
147147
for_each = var.encrypt_with_kms && var.enable_deploy_role ? [1] : []
148148
content {
149-
sid = "Allow deploy user to use the CMK"
149+
sid = "Allow deploy role to use the CMK"
150150
actions = [
151151
"kms:GenerateDataKey*",
152152
"kms:Encrypt",

0 commit comments

Comments
 (0)