fix: add kms:DescribeKey for backup key

fegmorte · fegmorte · commit 2abeca64f8c0 · 2026-02-23T12:20:41.000+01:00
diff --git a/modules/mpc-backup-key/main.tf b/modules/mpc-backup-key/main.tf
@@ -48,6 +48,7 @@ resource "aws_kms_key" "this_backup" {
         },
         Action = [
           "kms:GetPublicKey",
+          "kms:DescribeKey",
         ],
         Resource = "*"
       },
