unable to delete KMS Customer managed keys.

0

Unable to delete KMS Customer managed keys.Enter image description here

已提問 1 年前檢視次數 525 次
1 個回答
0

Based on error message it is KMS key policy thing. In order to dig dipper you can indeed go through : https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html.

You can follow below steps to troubleshoot:

  1. Check KMS key policy, check if role/user using which you are logged in having permission to manage KMS keys. Policy should look like below:
{
  "Sid": "Allow access for Key Administrators",
  "Effect": "Allow",
  "Principal": {"AWS":"arn:aws:iam::111122223333:role/ExampleAdminRole"},
  "Action": [
    "kms:Create*",
    "kms:Describe*",
    "kms:Enable*",
    "kms:List*",
    "kms:Put*",
    "kms:Update*",
    "kms:Revoke*",
    "kms:Disable*",
    "kms:Get*",
    "kms:Delete*",
    "kms:TagResource",
    "kms:UntagResource",
    "kms:ScheduleKeyDeletion",
    "kms:CancelKeyDeletion"
  ],
  "Resource": "*"
}
  1. Also try to login using root account and check if you are able delete it.
  2. If no user is not having permission to delete this key, best to contact AWS Support, they will help you.

Best Regards, Vikas

profile picture
Vikas
已回答 1 年前
profile picture
專家
已審閱 1 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南