remove key from policy

terraform-modules · Apr 1, 2021 · 3d12aae · 3d12aae
1 parent 7bdb854
commit 3d12aae
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 16 deletions.
diff --git a/ses-domain/README.md b/ses-domain/README.md
@@ -181,7 +181,6 @@ No modules.
 | [aws_arn.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/arn) | data source |
 | [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |
 | [aws_iam_policy_document.ses_event](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
-| [aws_kms_alias.sns](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/kms_alias) | data source |
 | [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source |
 | [external_external.ses_dns_txt](https://registry.terraform.io/providers/hashicorp/external/latest/docs/data-sources/external) | data source |
 

diff --git a/ses-domain/policies.tf b/ses-domain/policies.tf
@@ -1,20 +1,20 @@
-data "aws_kms_alias" "sns" {
-  name = "alias/aws/sns"
-}
+#data "aws_kms_alias" "sns" {
+#  name = "alias/aws/sns"
+#}
 
 data "aws_iam_policy_document" "ses_event" {
-  statement {
-    effect = "Alow"
-    actions = [
-      "kms:GenerateDataKey*",
-      "kms:Decrypt",
-    ]
-    resources = [data.aws_kms_alias.sns.arn]
-    principals {
-      type        = "Service"
-      identifiers = ["ses.amazonaws.com"]
-    }
-  }
+  #   statement {
+  #     effect = "Alow"
+  #     actions = [
+  #       "kms:GenerateDataKey*",
+  #       "kms:Decrypt",
+  #     ]
+  #     resources = [data.aws_kms_alias.sns.arn]
+  #     principals {
+  #       type        = "Service"
+  #       identifiers = ["ses.amazonaws.com"]
+  #     }
+  #   }
   statement {
     effect    = "Alow"
     actions   = ["sns:Publish"]