Listed actions individually instead of using wildcard.

elmaimbo · elmaimbo · commit d66aa22a135a · 2024-10-03T20:22:55.000+13:00
diff --git a/samtranslator/policy_templates_data/policy_templates.json b/samtranslator/policy_templates_data/policy_templates.json
@@ -1255,7 +1255,10 @@
           {
             "Action": [
               "kms:Encrypt",
-              "kms:GenerateDataKey*"
+              "kms:GenerateDataKey",
+              "kms:GenerateDataKeyWithoutPlaintext",
+              "kms:GenerateDataKeyPair",
+              "kms:GenerateDataKeyPairWithoutPlaintext"
             ],
             "Effect": "Allow",
             "Resource": {
diff --git a/tests/translator/output/all_policy_templates.json b/tests/translator/output/all_policy_templates.json
@@ -1423,7 +1423,10 @@
                 {
                   "Action": [
                     "kms:Encrypt",
-                    "kms:GenerateDataKey*"
+                    "kms:GenerateDataKey",
+                    "kms:GenerateDataKeyWithoutPlaintext",
+                    "kms:GenerateDataKeyPair",
+                    "kms:GenerateDataKeyPairWithoutPlaintext"
                   ],
                   "Effect": "Allow",
                   "Resource": {
diff --git a/tests/translator/output/aws-cn/all_policy_templates.json b/tests/translator/output/aws-cn/all_policy_templates.json
@@ -1423,7 +1423,10 @@
                 {
                   "Action": [
                     "kms:Encrypt",
-                    "kms:GenerateDataKey*"
+                    "kms:GenerateDataKey",
+                    "kms:GenerateDataKeyWithoutPlaintext",
+                    "kms:GenerateDataKeyPair",
+                    "kms:GenerateDataKeyPairWithoutPlaintext"
                   ],
                   "Effect": "Allow",
                   "Resource": {
diff --git a/tests/translator/output/aws-us-gov/all_policy_templates.json b/tests/translator/output/aws-us-gov/all_policy_templates.json
@@ -1423,7 +1423,10 @@
                 {
                   "Action": [
                     "kms:Encrypt",
-                    "kms:GenerateDataKey*"
+                    "kms:GenerateDataKey",
+                    "kms:GenerateDataKeyWithoutPlaintext",
+                    "kms:GenerateDataKeyPair",
+                    "kms:GenerateDataKeyPairWithoutPlaintext"
                   ],
                   "Effect": "Allow",
                   "Resource": {
