AWS GetPublicKey error handling fix (#389)

ecadlabs · Jul 17, 2023 · 9eef74d · 9eef74d
1 parent 11d91a4
commit 9eef74d
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/pkg/vault/aws/awskms.go b/pkg/vault/aws/awskms.go
@@ -108,7 +108,11 @@ func (i *awsKMSIterator) Next() (key vault.StoredKey, err error) {
 
 		if err == nil {
 			return key, nil
-		} else if awsErr, ok := err.(awserr.Error); ok && awsErr.Code() != "AccessDeniedException" || err != crypt.ErrUnsupportedKeyType {
+		} else if awsErr, ok := err.(awserr.Error); ok {
+			if awsErr.Code() != "AccessDeniedException" {
+				return nil, err
+			}
+		} else if err != crypt.ErrUnsupportedKeyType {
 			return nil, err
 		}
 	}