address feedback to add ReEncrypt permission.

imabhichow · imabhichow · commit bead908441d8 · 2023-10-10T09:49:16.000-07:00
diff --git a/cfn/ci_cd.yml b/cfn/ci_cd.yml
@@ -390,7 +390,8 @@ Resources:
                 "kms:Encrypt",
                 "kms:Decrypt",
                 "kms:GenerateDataKey",
-                "kms:GenerateDataKeyWithoutPlaintext"
+                "kms:GenerateDataKeyWithoutPlaintext",
+                "kms:ReEncrypt"
               ]
             }
           ]

Original file line number	Diff line number	Diff line change
`@@ -390,7 +390,8 @@ Resources:`
`390`	`390`	`"kms:Encrypt",`
`391`	`391`	`"kms:Decrypt",`
`392`	`392`	`"kms:GenerateDataKey",`
`393`		`- "kms:GenerateDataKeyWithoutPlaintext"`
	`393`	`+ "kms:GenerateDataKeyWithoutPlaintext",`
	`394`	`+ "kms:ReEncrypt"`
`394`	`395`	`]`
`395`	`396`	`}`
`396`	`397`	`]`