diff --git a/iam_policy.tf b/iam_policy.tf index 8f29ce0..75f243a 100644 --- a/iam_policy.tf +++ b/iam_policy.tf @@ -85,7 +85,7 @@ resource "aws_iam_policy" "rhel_x86_codepipeline_permissions" { "kms:GenerateDataKey", "kms:DescribeKey" ], - Resource = "arn:aws-us-gov:kms:us-gov-west-1:229685449397:key/${aws_kms_key.rhel_x86_codepipeline_key.id}" + Resource = "arn:aws-us-gov:kms:us-gov-west-1:229685449397:key/ba7dabdd-0f5a-44aa-9a90-a36c246a29a4" }, { Effect = "Allow", @@ -168,7 +168,7 @@ resource "aws_iam_policy" "rhel_x86_ec2_permissions" { "kms:GenerateDataKey", "kms:DescribeKey" ], - Resource = "arn:aws-us-gov:kms:us-gov-west-1:229685449397:key/${aws_kms_key.rhel_x86_codepipeline_key.id}" + Resource = "arn:aws-us-gov:kms:us-gov-west-1:229685449397:key/ba7dabdd-0f5a-44aa-9a90-a36c246a29a4" } ] }) diff --git a/kms.tf b/kms.tf index ac84978..e0491c1 100644 --- a/kms.tf +++ b/kms.tf @@ -1,5 +1,6 @@ resource "aws_kms_key" "rhel_x86_codepipeline_key" { description = "KMS key for RHEL x86 CodePipeline" + key_id = "ba7dabdd-0f5a-44aa-9a90-a36c246a29a4" # Static KMS Key ID policy = <