stelligent / cfn_nag

Linting tool for CloudFormation templates
MIT License
1.26k stars 212 forks source link

Fail Fatal KeyPolicy is required #628

Open shadycuz opened 3 months ago

shadycuz commented 3 months ago

cfn-nag says KeyPolicy is required for KMS key but cloudformation docs says its optional.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html#cfn-kms-key-keypolicy