DEV Community

Discussion on: AWS KMS use case with Serverless Application Model (SAM): An end to end solution

 
rajanpanchal profile image
Rajan Panchal

With that Policy, an inline policy for Lamdba is created and assigned to the execution role to have access to key. Lamdba doesn't use KeyUser.

Thread Thread
 
jingxue profile image
Jing Xue

Ok, that's what I thought. You don't really need the $keyUser statement. For using the key, it would probably be more portable to grant access to a role instead of a user anyway.