Skip to content

Commit

Permalink
Add validation checks for config option amazon_web_services.eks_kms_a…
Browse files Browse the repository at this point in the history
…rn to ensure KMS-key ARN available
  • Loading branch information
joneszc committed Oct 2, 2024
1 parent cb39106 commit 385f7aa
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions src/_nebari/stages/infrastructure/__init__.py
Original file line number Diff line number Diff line change
Expand Up @@ -580,9 +580,7 @@ def _check_input(cls, data: Any) -> Any:
raise ValueError(
f"Amazon Web Services KMS Key with ID {key_id} does not have KeyUsage set to 'Encrypt and decrypt' data"
)
elif (
available_kms_keys[key_id]["KeyUsage"] != "ENCRYPT_DECRYPT"
):
elif available_kms_keys[key_id]["KeyUsage"] != "ENCRYPT_DECRYPT":
raise ValueError(
f"Amazon Web Services KMS Key with ID {key_id} is not of type Symmetric, and KeyUsage not set to 'Encrypt and decrypt' data"
)
Expand Down

0 comments on commit 385f7aa

Please sign in to comment.