add kms:GenerateDataKey

uc-cdis · Jan 15, 2025 · 6f83f23 · 6f83f23
1 parent a3ac1a5
commit 6f83f23
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/gen3/bin/kube-setup-gen3-workflow.sh b/gen3/bin/kube-setup-gen3-workflow.sh
@@ -91,6 +91,7 @@ setup_gen3_workflow_infra() {
       "Effect": "Allow",
       "Action": [
           "kms:CreateKey",
+          "kms:GenerateDataKey",
           "kms:CreateAlias",
           "kms:DescribeKey",
           "kms:TagResource"