Skip to main content
Knowledge Base

Issues using the KMS Master Key module, "The new key policy will not allow you to update the key policy in the future."

Answer

Upon trying to use the KMS master key module I met with the following error: ``` Error: creating KMS Key: MalformedPolicyDocumentException: The new key policy will not allow you to update the key policy in the future. ``` I have ensured that I have filled out the `cmk_administrator_iam_arns` and `cmk_user_iam_arns` appropriately. Curious if anyone else has run into this what the fix was. Thank you. [r:terraform-aws-security](https://github.com/gruntwork-io/terraform-aws-security) --- <ins datetime="2023-04-19T23:45:46Z"> <p><a href="https://support.gruntwork.io/hc/requests/110098">Tracked in ticket #110098</a></p> </ins>

Ahh turns out I thought I had included a necessary `cmk_administrator_iam_arns` when in fact I missed one.