feat: adding more read permissions to kms key policy

2026-03-06 14:21:42 +08:00
parent 5d45ba8d46
commit f3573b320d
1 changed files with 4 additions and 1 deletions
@@ -641,7 +641,10 @@ data "aws_iam_policy_document" "base" {
            "kms:ListAliases",
            "kms:ListKeyPolicies",
            "kms:ListKeys",
-            "kms:ListResourceTags"
+            "kms:ListResourceTags",
+            "kms:GetKeyRotationStatus",
+            "kms:ListKeyRotations",
+            "kms:ListGrants"
          ],
          "Resource" : "*"
        },