Update kms_policy.json.tpl

easyawslearn · Jul 31, 2022 · e0575f0 · e0575f0
1 parent db2c0ef
commit e0575f0
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/kms_policy.json.tpl b/kms_policy.json.tpl
@@ -1 +1,13 @@
-
+{
+  "Version": "2012-10-17",
+  "Id": "kms-key-policy",
+  "Statement": [
+    {
+      "Sid": "Enable IAM User Permissions",
+      "Effect": "Allow",
+      "Principal": {"AWS": "arn:aws:iam::${account_id}:root"},{"Service": "logs.us-east-1.amazonaws.com"},
+      "Action": "kms:*",
+      "Resource": "*"
+    }
+  ]
+}