Difference between revisions of "Error: updating KMS Key"
Jump to navigation
Jump to search
Line 1: | Line 1: | ||
− | │ Error: updating KMS Key (123456): key rotation: AccessDeniedException: User: | + | │ Error: updating [[KMS Key]] (123456): key rotation: AccessDeniedException: User: |
arn:aws:sts::12345-role/path/gitHubSession is not authorized to perform: kms:DisableKeyRotation on | arn:aws:sts::12345-role/path/gitHubSession is not authorized to perform: kms:DisableKeyRotation on | ||
− | resource: arn:aws:kms:us-east-1:352711653659:key/123456 because no identity-based policy allows the | + | resource: arn:aws:kms:us-east-1:352711653659:key/123456 because no [[identity-based policy]] allows the |
kms:DisableKeyRotation action | kms:DisableKeyRotation action | ||
│ status code: 400, request id: 12345 | │ status code: 400, request id: 12345 | ||
Line 7: | Line 7: | ||
│ with module.bootstrap_account_region.module.KMS.aws_kms_key.eks_kms_key, | │ with module.bootstrap_account_region.module.KMS.aws_kms_key.eks_kms_key, | ||
│ on .terraform/modules/bootstrap_account_region/modules/KMS/main.tf line 5, in resource "aws_kms_key" "eks_kms_key": | │ on .terraform/modules/bootstrap_account_region/modules/KMS/main.tf line 5, in resource "aws_kms_key" "eks_kms_key": | ||
− | │ 5: resource "aws_kms_key" "eks_kms_key" { | + | │ 5: resource "aws_kms_key" "[[eks_kms_key]]" { |
Revision as of 11:14, 19 February 2024
│ Error: updating KMS Key (123456): key rotation: AccessDeniedException: User: arn:aws:sts::12345-role/path/gitHubSession is not authorized to perform: kms:DisableKeyRotation on resource: arn:aws:kms:us-east-1:352711653659:key/123456 because no identity-based policy allows the kms:DisableKeyRotation action │ status code: 400, request id: 12345 │ │ with module.bootstrap_account_region.module.KMS.aws_kms_key.eks_kms_key, │ on .terraform/modules/bootstrap_account_region/modules/KMS/main.tf line 5, in resource "aws_kms_key" "eks_kms_key": │ 5: resource "aws_kms_key" "eks_kms_key" {
See also
- KMS, Customer Master Key (CMK), GCP KMS, AWS Key Management Service (KMS) (
aws kms
), Google Cloud KMS (gcloud kms
), Azure Key Vault, KMS v2 API, Kubernetes Key Management Service terraform apply
[-auto-approve
|-refresh-only, -destroy | --help ]
, Terraform examples,Still creating...
, Terraform apply examples with errors
Advertising: