UML-3738: add missing action (#3045)

ministryofjustice · Jan 9, 2025 · 4b9201f · 4b9201f
1 parent 724cb5d
commit 4b9201f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/terraform/account/kms.tf b/terraform/account/kms.tf
@@ -207,6 +207,10 @@ data "aws_iam_policy_document" "event_receiver_kms" {
     sid       = "Allow Lambda Decrypt"
     effect    = "Allow"
     resources = ["*"]
+    actions = [
+      "kms:Decrypt",
+      "kms:DescribeKey",
+    ]
     principals {
       type = "AWS"
       identifiers = [