chore: 🤖 Add kms related iam role for custom keys usage

Vitesco-Technologies · Feb 2, 2024 · 69a8a6c · 69a8a6c
1 parent 948f31a
commit 69a8a6c
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/serverless.yml b/serverless.yml
@@ -20,7 +20,7 @@ package:
 
 provider:
   name: aws
-  runtime: python3.9
+  runtime: python3.10
   timeout: 30
   logRetentionInDays: 14
   stage: ${opt:stage, 'dev'}
@@ -57,6 +57,14 @@ provider:
             - "secretsmanager:GetSecretValue"
             - "secretsmanager:PutSecretValue"
             - "secretsmanager:UpdateSecretVersionStage"
+        - Effect: "Allow"
+          Resource: "*"
+          Action:
+            - "kms:Encrypt"
+            - "kms:Decrypt"
+            - "kms:ReEncrypt*"
+            - "kms:GenerateDataKey*"
+            - "kms:DescribeKey"
 
 custom:
   file: ${file(./config/serverless.${self:provider.stage}.yml)}