KMS Encryption - Local Development

Question

I have created AWS KMS Keys for encryption / decryption. The access has been provided to a specific which can encrypt / decrypt. I usually attach this role to my lambda in order to perform encryption / decryption. However I run the code locally , it fails as KMS key doesn't seem the associated role to authorize the operation. Is there a way I could use the KMS keys generated for local development?

Answer 1

We recommend using different KMS CMKs for your development stack than your production stack.

As for why you are getting access denied, John is correct; that will be because the user/role you are using locally does not have permissions to use the key.

https://docs.aws.amazon.com/kms/latest/developerguide/control-access-overview.html