Closed aureq closed 8 years ago
It would be nice if the KMS managed policy was spit into 2 separate policies. One that would be used to encrypt and another one (more restrictive) with only the ability to decrypt.
The documentation should be updated accordingly.
It would be nice if the KMS managed policy was spit into 2 separate policies. One that would be used to encrypt and another one (more restrictive) with only the ability to decrypt.