masterpointio/terraform-aws-ssm-agent

KMS Key Policy too broad

Closed this issue · 2 comments

arjitj2 commented

Hi there, according to everything I've read online, it's not a good thing to allow * AWS accounts to have access to the KMS key-- the default is root of the current AWS account.

https://github.com/masterpointio/terraform-aws-ssm-agent/blob/master/main.tf#L175

image

Gowiem commented

@arjitj2 this is a great point -- I would love a PR to fix this. Mind putting one up?

Gowiem commented

@gberenice if you get the chance as part of your current PR, it might be worth to address this.