[NDR-343] Update SSM policy

jameslinnell · jameslinnell · commit 0192c27dd0fc · 2025-12-30T10:20:47.000Z
diff --git a/infrastructure/policies.tf b/infrastructure/policies.tf
@@ -118,9 +118,7 @@ resource "aws_iam_policy" "mtls_access_ssm_policy" {
       {
         Effect = "Allow",
         Action = [
-          "kms:Encrypt",
           "kms:Decrypt",
-          "kms:GenerateDataKey"
         ],
         Resource = [
           module.pdm_encryption_key.kms_arn
