TerraformScripts/cloudformation-templates/terraform-fulfillment-server.yaml [343:359]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
              - !If
                - UseS3ManagedEncryptionKey
                - !Ref AWS::NoValue
                - Effect: Allow
                  Action:
                    - kms:Encrypt
                    - kms:Decrypt
                    - kms:GenerateDataKey*
                  Resource:
                    - !Sub arn:aws:kms:${AWS::Region}:${AWS::AccountId}:key/${BucketEncryptionKeyId}
        - PolicyName: RoleAssumptionPolicy
          PolicyDocument:
            Statement:
              Effect: Allow
              Action:
                - sts:AssumeRole
              Resource: "arn:aws:iam::*:role/TerraformResourceCreation*"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



TerraformScripts/cloudformation-templates/terraform-fulfillment-server.yaml [413:429]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
              - !If
                - UseS3ManagedEncryptionKey
                - !Ref AWS::NoValue
                - Effect: Allow
                  Action:
                    - kms:Encrypt
                    - kms:Decrypt
                    - kms:GenerateDataKey*
                  Resource:
                    - !Sub arn:aws:kms:${AWS::Region}:${AWS::AccountId}:key/${BucketEncryptionKeyId}
        - PolicyName: RoleAssumptionPolicy
          PolicyDocument:
            Statement:
              Effect: Allow
              Action:
                - sts:AssumeRole
              Resource: "arn:aws:iam::*:role/TerraformResourceCreation*"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



