Added permission required to generate data key for encryption.

Author: Nick Tait

samtranslator/policy_templates_data/policy_templates.json

@@ -1253,7 +1253,10 @@
       "Definition": {
         "Statement": [
           {
-            "Action": "kms:Encrypt",
+            "Action": [
+              "kms:Encrypt",
+              "kms:GenerateDataKey"
+            ],
             "Effect": "Allow",
             "Resource": {
               "Fn::Sub": [