From 6c1cb2a0996590829781ea44d80d4918dcf4ab71 Mon Sep 17 00:00:00 2001
From: Megan Marsh <megan@hashicorp.com>
Date: Thu, 21 Nov 2019 13:24:44 -0800
Subject: [PATCH] add unique kms case to permissions docs

---
 website/source/docs/builders/amazon.html.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/website/source/docs/builders/amazon.html.md b/website/source/docs/builders/amazon.html.md
index a27da19b9..07e4ce23c 100644
--- a/website/source/docs/builders/amazon.html.md
+++ b/website/source/docs/builders/amazon.html.md
@@ -248,6 +248,15 @@ following policies at a minimum:
 }
 ```
 
+If you are using a key provided by a different account than the one you are
+using to run the Packer build, your key will also need
+
+``` json
+        "kms:CreateGrant",
+        "kms:DescribeKey"
+```
+
+
 ### Checking that system time is current
 
 Amazon uses the current time as part of the [request signing