Skip to content

Commit 14be041

Browse files
yangawsjesterhazy
authored andcommitted
update name and permissions for test kms key (aws#683)
1 parent cb2e2b9 commit 14be041

File tree

1 file changed

+1
-34
lines changed

1 file changed

+1
-34
lines changed

tests/integ/kms_utils.py

Lines changed: 1 addition & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# language governing permissions and limitations under the License.
1313
from __future__ import absolute_import
1414

15-
KEY_ALIAS = "SageMakerKmsKey"
15+
KEY_ALIAS = "SageMakerIntegTestKmsKey"
1616
KEY_POLICY = '''
1717
{{
1818
"Version": "2012-10-17",
@@ -26,39 +26,6 @@
2626
}},
2727
"Action": "kms:*",
2828
"Resource": "*"
29-
}},
30-
{{
31-
"Sid": "Allow use of the key",
32-
"Effect": "Allow",
33-
"Principal": {{
34-
"AWS": "{account_id}"
35-
}},
36-
"Action": [
37-
"kms:Encrypt",
38-
"kms:Decrypt",
39-
"kms:ReEncrypt*",
40-
"kms:GenerateDataKey*",
41-
"kms:DescribeKey"
42-
],
43-
"Resource": "*"
44-
}},
45-
{{
46-
"Sid": "Allow attachment of persistent resources",
47-
"Effect": "Allow",
48-
"Principal": {{
49-
"AWS": "{account_id}"
50-
}},
51-
"Action": [
52-
"kms:CreateGrant",
53-
"kms:ListGrants",
54-
"kms:RevokeGrant"
55-
],
56-
"Resource": "*",
57-
"Condition": {{
58-
"Bool": {{
59-
"kms:GrantIsForAWSResource": "true"
60-
}}
61-
}}
6229
}}
6330
]
6431
}}

0 commit comments

Comments
 (0)