Updated on 2024-05-16 GMT+08:00

No Blocked Actions on KMS Keys

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

iam-customer-policy-blocked-kms-actions

Identifier

iam-customer-policy-blocked-kms-actions

Description

If there is a blocked action for KMS in an IAM policy, this policy is noncompliant.

Tag

iam

Trigger Type

Configuration change

Filter Type

iam.roles, iam.policies

Configure Rule Parameters

blockedActionsPatterns: indicates blocked actions for KMS. The value must be an array.