Update the kms key model to support BypassPolicyLockoutSafetyCheck

Skyscanner · Dec 27, 2023 · 7b660ae · 7b660ae
1 parent cf9c45d
commit 7b660ae
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/pycfmodel/model/resources/kms_key.py b/pycfmodel/model/resources/kms_key.py
@@ -23,14 +23,15 @@ class KMSKeyProperties(CustomModel):
 
     More info at [AWS Docs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html)
     """
-
+    BypassPolicyLockoutSafetyCheck: Optional[ResolvableBool] = None
     Description: Optional[ResolvableStr] = None
-    EnableKeyRotation: Optional[ResolvableBool] = None
     Enabled: Optional[ResolvableBool] = None
+    EnableKeyRotation: Optional[ResolvableBool] = None
     KeyPolicy: Resolvable[PolicyDocument]
-    KeyUsage: Optional[ResolvableStr] = None
     KeySpec: Optional[ResolvableStr] = None
+    KeyUsage: Optional[ResolvableStr] = None
     MultiRegion: Optional[ResolvableBool] = None
+    Origin: Optional[ResolvableStr] = None
     PendingWindowInDays: Optional[ResolvableInt] = None
     Tags: Optional[Resolvable[List[Tag]]] = None
 

diff --git a/tests/resources/test_kms_key.py b/tests/resources/test_kms_key.py
@@ -16,6 +16,7 @@ def kms_key():
                 "KeyUsage": "SIGN_VERIFY",
                 "MultiRegion": True,
                 "EnableKeyRotation": True,
+                "BypassPolicyLockoutSafetyCheck": False,
                 "KeyPolicy": {
                     "Version": "2012-10-17",
                     "Id": "key-default-1",
@@ -166,3 +167,4 @@ def test_kms_policy_documents(kms_key):
             ),
         )
     ]
+