duo-labs / cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
BSD 3-Clause "New" or "Revised" License
5.96k stars 800 forks source link

Imported KMS Key Error #662

Open 0xjjoyy opened 4 years ago

0xjjoyy commented 4 years ago

CloudMapper fails to run and stops with the following error message. The scenario is an imported KMS Key that hasn't completed or finalized. Hence, there is no key policy attached.

No vault access policy is set for: XXXXXXXXXXX
  kms.list_keys({}): Connect timeout on endpoint URL: "https://kms.us-east-1.amazonaws.com/"
  kms.get_key_rotation_status({'KeyId': 'ZZZZZZZZZZZZZZZZZZZZ'}): 
An error occurred (UnsupportedOperationException) when calling the GetKeyRotationStatus operation: 
arn:aws:kms:us-east-1:123456789123:key/ZZZZZZZZZZZZZZZZZZZ origin is EXTERNAL which is not valid for this operation.