Merge pull request #8399 from hashicorp/update_kms_docs

add unique kms case to permissions docs
2019-11-21 15:17:08 -08:00 · 2019-11-21 15:17:08 -08:00 · 664d9c972a
parent 40e9c4b517 6c1cb2a099
commit 664d9c972a
1 changed files with 9 additions and 0 deletions
--- a/website/source/docs/builders/amazon.html.md
+++ b/website/source/docs/builders/amazon.html.md
@ -248,6 +248,15 @@ following policies at a minimum:
 }
 ```

+If you are using a key provided by a different account than the one you are
+using to run the Packer build, your key will also need
+
+``` json
+        "kms:CreateGrant",
+        "kms:DescribeKey"
+```
+
+
 ### Checking that system time is current

 Amazon uses the current time as part of the [request signing