diff --git a/kms/keysource.go b/kms/keysource.go index b61445d52..adf2b6e7f 100644 --- a/kms/keysource.go +++ b/kms/keysource.go @@ -180,7 +180,7 @@ func (key MasterKey) createStsSession(config aws.Config, sess *session.Session) } func (key MasterKey) createSession() (*session.Session, error) { - re := regexp.MustCompile(`^arn:aws[\w-]*:kms:(.+):[0-9]+:key/.+$`) + re := regexp.MustCompile(`^arn:aws[\w-]*:kms:(.+):[0-9]+:(key|alias)/.+$`) matches := re.FindStringSubmatch(key.Arn) if matches == nil { return nil, fmt.Errorf("No valid ARN found in %q", key.Arn)