Details
-
Bug
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
It was pretty unclear as a user that "*" is a special case for KMS Ranger policies and that in general it has to be a literal match. In particular, I was expecting a policy with "pii*" to match both "pii" and "pii256". The current code only supports "*" or literal lists of the kms key names (eg. "pii", "pii256".