Add KMS permission to Redshift Role

igorborgest · igorborgest · commit d4b27c6fc950 · 2020-04-28T23:35:32.000-03:00
diff --git a/testing/cloudformation.yaml b/testing/cloudformation.yaml
@@ -96,6 +96,15 @@ Resources:
           PolicyDocument:
             Version: 2012-10-17
             Statement:
+              - Effect: Allow
+                Action:
+                  - kms:Encrypt
+                  - kms:Decrypt
+                  - kms:GenerateDataKey
+                Resource:
+                  - Fn::GetAtt:
+                      - KmsKey
+                      - Arn
               - Effect: Allow
                 Action:
                   - s3:Get*
