Not getting alerts from Autocalling when encryption enabled in SNS topic

Question

When we enable the encryption on SNS topic then not getting autoscale related alerts from AWS side. I created the KMS key custom and gave the all permission but it's not working.

{
            "Sid": "Enable SNS access to KMS",
            "Effect": "Allow",
            "Principal": {
                "Service": [
                    "ses.amazonaws.com",
                    "s3.amazonaws.com",
                    "cloudwatch.amazonaws.com",
                    "events.amazonaws.com",
                    "ec2.amazonaws.com"
                ]
            },
            "Action": [
                "kms:Decrypt",
                "kms:GenerateDataKey"
            ],
            "Resource": "*"
        }

Accepted Answer

I believe the issue is in the "Principal" field.
You can use "*"
Or you can use "arn:aws:iam:::role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling"
Or you can create your own role with a copy of AWSServiceRoleForAutoScaling.

Not getting alerts from Autocalling when encryption enabled in SNS topic

Relevanter Inhalt