deployment/publisher.yaml [287:313]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
            Action:
              - kms:GenerateDataKey*
              - kms:Decrypt
            Resource: '*'


  EventTopicPolicy:
    Type: 'AWS::SNS::TopicPolicy'
    Properties:
      PolicyDocument:
        Version: 2012-10-17
        Statement:
          -
            Sid: Allow_Publish_Events
            Effect: Allow
            Principal:
              Service: events.amazonaws.com
            Action:
              - sns:Publish
            Resource:
              Ref: NotificationTopic

          -
            Sid: Allow_X_Account_Subscribe
            Effect: Allow
            Principal:
              AWS:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



deployment/subscriber.yaml [204:231]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
            Action:
              - kms:GenerateDataKey*
              - kms:Decrypt
            Resource: '*'



  EventTopicPolicy:
    Type: 'AWS::SNS::TopicPolicy'
    Properties:
      PolicyDocument:
        Version: 2012-10-17
        Statement:
          -
            Sid: Allow_Publish_Events
            Effect: Allow
            Principal:
              Service: events.amazonaws.com
            Action:
              - sns:Publish
            Resource:
              Ref: NotificationTopic

          -
            Sid: Allow_X_Account_Subscribe
            Effect: Allow
            Principal:
              AWS:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



