Merge pull request #415 from sagansystems/aws-kms-aliases

Support referencing AWS KMS keys by aliases
getsops · Jan 11, 2019 · cfc6fa1 · cfc6fa1
2 parents e398d1c + 7a78a69
commit cfc6fa1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/kms/keysource.go b/kms/keysource.go
@@ -180,7 +180,7 @@ func (key MasterKey) createStsSession(config aws.Config, sess *session.Session)
 }
 
 func (key MasterKey) createSession() (*session.Session, error) {
-	re := regexp.MustCompile(`^arn:aws[\w-]*:kms:(.+):[0-9]+:key/.+$`)
+	re := regexp.MustCompile(`^arn:aws[\w-]*:kms:(.+):[0-9]+:(key|alias)/.+$`)
 	matches := re.FindStringSubmatch(key.Arn)
 	if matches == nil {
 		return nil, fmt.Errorf("No valid ARN found in %q", key.Arn)