add unique kms case to permissions docs

2019-11-21 13:24:44 -08:00 · 2019-11-21 13:24:44 -08:00 · 6c1cb2a099
parent ca4bb238f7
commit 6c1cb2a099
1 changed files with 9 additions and 0 deletions
--- a/website/source/docs/builders/amazon.html.md
+++ b/website/source/docs/builders/amazon.html.md
@ -248,6 +248,15 @@ following policies at a minimum:
 }
 ```

+If you are using a key provided by a different account than the one you are
+using to run the Packer build, your key will also need
+
+``` json
+        "kms:CreateGrant",
+        "kms:DescribeKey"
+```
+
+
 ### Checking that system time is current

 Amazon uses the current time as part of the [request signing