Update kms.tf

UKHomeOffice · Sep 9, 2024 · a2d58d3 · a2d58d3
1 parent 845624c
commit a2d58d3
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/modules/products/static-site/kms.tf b/modules/products/static-site/kms.tf
@@ -9,6 +9,15 @@ key_id = aws_kms_key.static_site_kms.id
     "Version": "2012-10-17",
     "Id": "key-default-1",
     "Statement": [
+        {
+            "Sid": "Enable IAM User Permissions",
+            "Effect": "Allow",
+            "Principal": {
+                "AWS": "arn:aws:iam::${local.account_id}:root"
+            },
+            "Action": "kms:*",
+            "Resource": "*"
+        },
         {
             "Sid": "Allow use of the key",
             "Effect": "Allow",