search

aws / aws-cdk

The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code
https://aws.amazon.com/cdk
Apache License 2.0
11.64k stars 3.91k forks source link

aws-kms: add grant function for `kms:GenerateDataKey` && `kms:DecryptKey` #22895

Open drewmullen opened 1 year ago

drewmullen commented 1 year ago

Describe the feature

Its very common with sqs queues to require kms:GenerateDataKey && kms:DecryptKey to write to an encrypted queue. would be nice to have this in an easy to provision function.

Use Case

sqs docs with kms

Proposed Solution

No response

Other Information

No response

Acknowledgements

CDK version used

2.x

Environment details (OS name and version, etc.)

doesnt matter

peterwoodworth commented 1 year ago

Thanks for the request, and the PR! Hopefully someone from the team will be able to review it soon 🙂

drewmullen commented 1 year ago

this PR is actually less useful if https://github.com/aws/aws-cdk/issues/22956 was provided... took me a bit to realize that kms perms were being auto-provisioned for some functions but not others