Skip to content

Commit 8d88138

Browse files
committed
feat(kms): add bypassPolicyLockoutSafetyCheck property
1 parent 3f4d585 commit 8d88138

File tree

12 files changed

+966
-0
lines changed

12 files changed

+966
-0
lines changed

packages/@aws-cdk-testing/framework-integ/test/aws-kms/test/integ.key-bypass-policy-lockout.js.snapshot/BypassPolicyLockoutIntegTestDefaultTestDeployAssert366E3C6B.assets.json

Lines changed: 20 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/@aws-cdk-testing/framework-integ/test/aws-kms/test/integ.key-bypass-policy-lockout.js.snapshot/BypassPolicyLockoutIntegTestDefaultTestDeployAssert366E3C6B.template.json

Lines changed: 36 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/@aws-cdk-testing/framework-integ/test/aws-kms/test/integ.key-bypass-policy-lockout.js.snapshot/aws-cdk-kms-bypass-policy-lockout.assets.json

Lines changed: 20 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,145 @@
1+
{
2+
"Resources": {
3+
"KeyWithBypassTrue6B9254EA": {
4+
"Type": "AWS::KMS::Key",
5+
"Properties": {
6+
"BypassPolicyLockoutSafetyCheck": true,
7+
"KeyPolicy": {
8+
"Statement": [
9+
{
10+
"Action": "kms:*",
11+
"Effect": "Allow",
12+
"Principal": {
13+
"AWS": {
14+
"Fn::Join": [
15+
"",
16+
[
17+
"arn:",
18+
{
19+
"Ref": "AWS::Partition"
20+
},
21+
":iam::",
22+
{
23+
"Ref": "AWS::AccountId"
24+
},
25+
":root"
26+
]
27+
]
28+
}
29+
},
30+
"Resource": "*"
31+
}
32+
],
33+
"Version": "2012-10-17"
34+
}
35+
},
36+
"UpdateReplacePolicy": "Delete",
37+
"DeletionPolicy": "Delete"
38+
},
39+
"KeyWithBypassFalseE7AF3F6C": {
40+
"Type": "AWS::KMS::Key",
41+
"Properties": {
42+
"BypassPolicyLockoutSafetyCheck": false,
43+
"KeyPolicy": {
44+
"Statement": [
45+
{
46+
"Action": "kms:*",
47+
"Effect": "Allow",
48+
"Principal": {
49+
"AWS": {
50+
"Fn::Join": [
51+
"",
52+
[
53+
"arn:",
54+
{
55+
"Ref": "AWS::Partition"
56+
},
57+
":iam::",
58+
{
59+
"Ref": "AWS::AccountId"
60+
},
61+
":root"
62+
]
63+
]
64+
}
65+
},
66+
"Resource": "*"
67+
}
68+
],
69+
"Version": "2012-10-17"
70+
}
71+
},
72+
"UpdateReplacePolicy": "Delete",
73+
"DeletionPolicy": "Delete"
74+
},
75+
"KeyWithBypassUndefinedDAB57087": {
76+
"Type": "AWS::KMS::Key",
77+
"Properties": {
78+
"KeyPolicy": {
79+
"Statement": [
80+
{
81+
"Action": "kms:*",
82+
"Effect": "Allow",
83+
"Principal": {
84+
"AWS": {
85+
"Fn::Join": [
86+
"",
87+
[
88+
"arn:",
89+
{
90+
"Ref": "AWS::Partition"
91+
},
92+
":iam::",
93+
{
94+
"Ref": "AWS::AccountId"
95+
},
96+
":root"
97+
]
98+
]
99+
}
100+
},
101+
"Resource": "*"
102+
}
103+
],
104+
"Version": "2012-10-17"
105+
}
106+
},
107+
"UpdateReplacePolicy": "Delete",
108+
"DeletionPolicy": "Delete"
109+
}
110+
},
111+
"Parameters": {
112+
"BootstrapVersion": {
113+
"Type": "AWS::SSM::Parameter::Value<String>",
114+
"Default": "/cdk-bootstrap/hnb659fds/version",
115+
"Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
116+
}
117+
},
118+
"Rules": {
119+
"CheckBootstrapVersion": {
120+
"Assertions": [
121+
{
122+
"Assert": {
123+
"Fn::Not": [
124+
{
125+
"Fn::Contains": [
126+
[
127+
"1",
128+
"2",
129+
"3",
130+
"4",
131+
"5"
132+
],
133+
{
134+
"Ref": "BootstrapVersion"
135+
}
136+
]
137+
}
138+
]
139+
},
140+
"AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
141+
}
142+
]
143+
}
144+
}
145+
}

packages/@aws-cdk-testing/framework-integ/test/aws-kms/test/integ.key-bypass-policy-lockout.js.snapshot/cdk.out

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/@aws-cdk-testing/framework-integ/test/aws-kms/test/integ.key-bypass-policy-lockout.js.snapshot/integ.json

Lines changed: 13 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)