Ravi Sir's Cards › AWS
Why key policy still matters?
This interview card answers: Why key policy still matters? S3 authorization ≠ KMS authorization; callers need kms:Encrypt/Decrypt as designed. Cross-account readers need grants. Missing Decrypt , then KMS AccessDenied on Get.
Read card text
What this card says
What it is
S3 authorization ≠ KMS authorization; callers need kms:Encrypt/Decrypt as designed.
KMS
Why it matters
Cross-account readers need grants.
How / example
Missing Decrypt → KMS AccessDenied on Get.