From 6f83f23254352408108e9cac31835da40ff7012b Mon Sep 17 00:00:00 2001
From: Pauline Ribeyre <4224001+paulineribeyre@users.noreply.github.com>
Date: Wed, 15 Jan 2025 12:09:02 -0600
Subject: [PATCH] add kms:GenerateDataKey

---
 gen3/bin/kube-setup-gen3-workflow.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gen3/bin/kube-setup-gen3-workflow.sh b/gen3/bin/kube-setup-gen3-workflow.sh
index 26a9b9360..21de564ec 100644
--- a/gen3/bin/kube-setup-gen3-workflow.sh
+++ b/gen3/bin/kube-setup-gen3-workflow.sh
@@ -91,6 +91,7 @@ setup_gen3_workflow_infra() {
       "Effect": "Allow",
       "Action": [
           "kms:CreateKey",
+          "kms:GenerateDataKey",
           "kms:CreateAlias",
           "kms:DescribeKey",
           "kms:TagResource"