Open
Description
Copilot deploys two IAM roles that are triggering the above alert in Security Hub which has medium severity. The roles are:
EnvManagerRole
CFNExecutionRole
Can this be addressed in future releases so that this isn't a security concern?
Thanks,
Andre
[KMS.2] Checks whether the inline policies embedded in your IAM principals (Role/User/Group) allow the AWS Key Management Service (KMS) decryption actions on all KMS keys. This control fails if kms:Decrypt or kms:ReEncryptFrom actions are allowed on all KMS keys in an inline policy.
Activity