lulo KMS Grants manages [AWS KMS Key grants](http://docs.aws.amazon.com/kms/latest/developerguide/grants.html).
npm install lulo-plugin-kms-grantlulo KMS Grants manages AWS KMS Key grants.
lulo KMS Grants is a lulo plugin
$ npm install lulo-plugin-kms-grant --save
Usage
$3
* GranteePrincipal: Required. The principal this grant is given to.
* KeyId: Required. The KMS Key the grant is valid for.
* Operations: Required. An array of operations the grant enables. Must contain at least one operation.
* Name: Update requires replacement. A friendly name for identifying the grant. Use this value to prevent unintended creation of duplicate grants when retrying this request.
* Constraints
* GrantTokensSee the AWS SDK Documentation for KMS::CreateGrant for further details.
Note:
If you update a grant that does not have a Name specified, the old Grant will be revoked and a new Grant, with a new GrantId will be created.
By specifying a Name, and not changing it when you update the Grant, you will keep the same GrantId even if you update it.
$3
#### Ref
When the logical ID of this resource is provided to the Ref intrinsic function, Ref returns the GrantId.
#### Fn::GetAtt
GrantToken Returns the GrantToken generated for this Grant.
$3
The Custom Resource Lambda requires the following permissions for this plugin to work:
{
"Effect": "Allow",
"Action": [
"kms:CreateGrant",
"kms:RevokeGrant",
"kms:RetireGrant"
],
"Resource": "*"
}