duo-labs / cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
BSD 3-Clause "New" or "Revised" License
5.9k stars 797 forks source link

KMS - Origin External issue #906

Open MehdiM62 opened 2 years ago

MehdiM62 commented 2 years ago

Hi there,

I come across below error for KMS, I was wondering if anyone could help me out with that?

kms.get_key_rotation_status({'KeyId': 'xxxx}): An error occurred (UnsupportedOperationException) when calling the GetKeyRotationStatus operation: arn:aws:kms:eu-west-1:xxx:key/xxx origin is EXTERNAL which is not valid for this operation.
brendan-s1 commented 2 years ago

Same, in our large account, we are running: python cloudmapper.py collect --account accountName

And after checking EBS Volumes, i'm getting an exception here: kms.get_key_rotation_status({'KeyId': 'axxxxxxxx'}): An error occurred (UnsupportedOperationException) when calling the GetKeyRotationStatus operation: arn:aws:kms:us-east-1:1611111111:key/a8xxxxxx origin is EXTERNAL which is not valid for this operation. kms.get_key_rotation_status({'KeyId': 'ddxxxxxxxxx'}): An error occurred (UnsupportedOperationException) when calling the GetKeyRotationStatus operation: arn:aws:kms:us-east-1:16111111111:key/ddxxxxxx origin is EXTERNAL which is not valid for this operation.