scan-triggers/aws-python-bucket-full-and-scheduled-scan
Problem to solve
Cannot scan and send results when buckets and queues are encrypted
Proposed solution
- Add stack parameters
KMSKeyARNForBucketSSE and KMSKeyARNForQueueSSE (similar to the All-in-One template)
- Add permissions kms:Decrypt and kms:GenerateDatakey to the IAM Role when keys are specified
scan-triggers/aws-python-bucket-full-and-scheduled-scan
Problem to solve
Cannot scan and send results when buckets and queues are encrypted
Proposed solution
KMSKeyARNForBucketSSEandKMSKeyARNForQueueSSE(similar to the All-in-One template)