Why are my AWS KMS keys not appearing in CloudHealth?

Products

• CloudHealth

Issue/Introduction

For CloudHealth to collect AWS Key Management Service (KMS) Customer Master Keys (CMK), it is required that the key policies in place allow IAM access.

This is the default for new keys, but if the key policies have been modified to remove the default IAM access, CloudHealth will be unable to completely collect the key and its tag data.

This AWS documentation goes into more detail regarding KMS Keys: https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#key-policy-default-allow-root-enable-iamI