deep-security / serverless-kms-grants

Serverless Framework plugin to create and revoke AWS KMS grants during serverless deploy/remove.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Missing operations?

buccfer opened this issue · comments

Looking at the code I see only Encrypt and Decrypt are granted.

This seems not to be sufficient when trying to perform a putObject with S3 using the KMS key to encrypt the file at rest. This is explained here: https://aws.amazon.com/premiumsupport/knowledge-center/s3-troubleshoot-403/

Selection_001

Am I missing something?