Enable ebs encryption - Githubissues

GSA-TTS / datagov-brokerpak-eks

Broker AWS EKS instances using the OSBAPI (eg from cloud.gov)

Other

9 stars 7 forks source link

Closed nickumia-reisys closed 2 years ago

nickumia-reisys commented 2 years ago

Nooooooo, it works, but it's still not encrypted 😭

nickumia-reisys commented 2 years ago

Following the troubleshooting here based on stackoverflow solution:

I verified that the EBS Policy was missing GenerateDataKeyWithoutPlaintext permissions.
The solution was to update the KMS Key Policy to allow further delegation of the encryption key through the policy