halprin / terraform-bbedit-language Goto Github PK

resource "aws_kms_key" "redshift" {
  description             = "Redshift encryption key"
  deletion_window_in_days = 7

  policy = <<-EOF
    {
      "Id": "key-consolepolicy-3",
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "Enable IAM User Permissions",
          "Effect": "Allow",
          "Principal": {
            "AWS": "arn:aws:iam::${data.aws_caller_identity.current.account_id}:root"
          },
          "Action": "kms:*",
          "Resource": "*"
        }
      ]
    }
    EOF
}