Terraform resource: aws kms key policy

• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key_policy

resource "aws_kms_key" "example" {
  description = "example"
}

resource "aws_kms_key_policy" "example" {
  key_id = aws_kms_key.example.id
  policy = jsonencode({
    Id = "example"
    Statement = [
      {
        Action = "kms:*"
        Effect = "Allow"
        Principal = {
          AWS = "*"
        }

        Resource = "*"
        Sid      = "Enable IAM User Permissions"
      },
    ]
    Version = "2012-10-17"
  })
}

See also

• Terraform KMS: KMS module, KMS resources: aws_kms_alias, aws_kms_key, aws_kms_ciphertext, aws_kms_external_key, aws_kms_grant, aws_kms_replica_external_key, aws_kms_replica_key, aws_kms_key_policy