[Bug]: One or more of the attached Amazon EBS volumes are encrypted with an inaccessible AWS KMS key.

[davidklett]

Installation method

Own AWS account

What happened?

I tried launching the stack in us-west-2, but the EC2 instance failed to launch with:

Cause: One or more of the attached Amazon EBS volumes are encrypted with an inaccessible AWS KMS key.

Resolution:
Ensure that the KMS keys are in the enabled state.
Ensure that you have the following permissions to decrypt and encrypt volumes:
"kms:CreateGrant"
"kms:Decrypt"
"kms:DescribeKey"
"kms:GenerateDataKeyWithoutPlainText"
"kms:ReEncrypt"
If the instance was launched on your behalf by another AWS service, such as Amazon EC2 Auto Scaling, ensure that the KMS key policies grant that service access to the KMS key.

Attached are screenshots.

What did you expect to happen?

I expected the stack to at least successfully launch.

How can we reproduce it?

Try to launch the stack in us-west-2.

Anything else we need to know?

No response

EKS version

NA, didn't get to deploying EKS. Just having issues with the initial stack eks-workshop-ide

[niallthomson]

Hi @davidklett do you have the IAM permissions as the error suggests?