https://github.com/launchbynttdata/tf-aws-module_primitive-kms_key_policy
https://github.com/launchbynttdata/tf-aws-module_primitive-kms_key_policy
Last synced: 13 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/launchbynttdata/tf-aws-module_primitive-kms_key_policy
- Owner: launchbynttdata
- License: apache-2.0
- Created: 2025-10-27T16:45:40.000Z (9 months ago)
- Default Branch: main
- Last Pushed: 2026-03-16T18:44:45.000Z (4 months ago)
- Last Synced: 2026-03-17T03:41:06.598Z (4 months ago)
- Language: Go
- Size: 60.5 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 10
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: CODEOWNERS
- Notice: NOTICE
Awesome Lists containing this project
README
# tf-aws-module_primitive-kms_key_policy_policy
## Requirements
| Name | Version |
|------|---------|
| [terraform](#requirement\_terraform) | ~> 1.5 |
| [aws](#requirement\_aws) | ~> 5.0 |
## Providers
| Name | Version |
|------|---------|
| [aws](#provider\_aws) | 5.100.0 |
## Modules
No modules.
## Resources
| Name | Type |
|------|------|
| [aws_kms_key_policy.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kms_key_policy) | resource |
| [aws_iam_policy_document.kms_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| [key\_id](#input\_key\_id) | (Required) The ID of the KMS Key to attach the policy. | `string` | n/a | yes |
| [policy](#input\_policy) | Accepts one of the following:
1. A map of statements (the legacy behaviour of this module) where each entry contains sid, effect, principals, actions, resources, and optional condition blocks.
2. An aws\_iam\_policy\_document data source (the object itself) so the module can reuse its rendered JSON.
3. A raw JSON string that should be attached to the KMS key as-is. | `any` | n/a | yes |
| [bypass\_policy\_lockout\_safety\_check](#input\_bypass\_policy\_lockout\_safety\_check) | (Optional) A boolean flag to indicate whether to bypass the KMS key policy lockout safety check. Defaults to false. | `bool` | `false` | no |
## Outputs
| Name | Description |
|------|-------------|
| [id](#output\_id) | The ID of the KMS Key Policy resource. |