1개 답변
- 최신
- 최다 투표
- 가장 많은 댓글
0
Hi,
I have checked the AWS CloudTrail logs with source kms.amazonaws.com and noticed KMS:Decrypt API call is getting Access Denied at the same time as the VM Import task was created and it is for the vmimport IAM role.
The similar is mentioned on our troubleshooting section [+] as well which reads you need to assign additional Decrypt permission if you're S3 server-side encryption with KMS key and it provides permission JSON block which is required to resolve this error.
Once you have added the KMS Decrypt permission to the vmimport role, please rerun the import job and verify if it works.