Unable to remove the KMS KEY. Need helps

0

Dear all supports,

I accidentally lock all the account from a particular key. Effect deny Principal account id:root Action : kms reEncrypt*, generatedataley*, encrypt, describekey, decrypt Resource *

How to resolve this issue?

McDs23
질문됨 일 년 전330회 조회
1개 답변
3
수락된 답변

Dear McDs23, it depends. I see two possible scenarios here: 1 - the actions you mentioned have been blocked by SCPs, in which case you can easily solve the problem by updating the SCP policy. 2 - the most common case is when the user accidentally configures a KMS policy that limits itself the usage of the key. In this case, you want to try first to amend the policy by logging into the account as root. If this doesn't help then you would need to raise a ticket to AWS support, they will contact you providing a PIN that you have to provide when contacted over the phone and after that AWS support will fix the problem with the KMS key.

Hope this helps ;)

profile picture
답변함 일 년 전
profile picture
전문가
검토됨 한 달 전
  • thank you. I cant access the kms key anymore, even using other accounts too. Will raise the support case for this.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠