Error deploying resources: Access denied for 'DescribeKey' on AWS::KMS::Key

[rohit3d2003]

Describe the bug

I'm encountering an error when attempting to deploy resources using amplify push with the latest Amplify CLI. The error message is: "Unable to retrieve Arn attribute for AWS::KMS::Key, with error message Access denied for operation 'DescribeKey'."

Steps To Reproduce

Steps to reproduce the behavior:
1. Create AWS KMS using custom resources in Amplify.
2. Create Lambda functions that depend on KMS to decrypt existing secret.
3. Run amplify push to deploy the resources.
4. Observe the error message related to KMS permissions.

Expected behavior

The resources should deploy successfully without encountering permission issues.

Amplify Framework Version

2.44.0

Amplify Categories

API, Auth, DataStore, Storage

Dependency manager

Swift PM

Swift version

6.0.2

CLI version

12.13.1

Xcode version

16.1

Relevant log output

<details>
<summary>Log Messages</summary>


INSERT LOG MESSAGES HERE

```

Is this a regression?

Yes

Regression additional context

No response

Platforms

iOS

OS Version

iOS 18.1

Device

iphone 16

Specific to simulators

No response

Additional context

No response

[vincetran]

Since this is related to being unable to push using the CLI, I'm transfering this to amplify-backend who owns the CLI tooling

[ykethan]

Hey @rohit3d2003, thank you for reaching out.
When creating custom resources using Amplify CLI, the CLI may require additional permissions outside the Amplify managed policy, AdministratorAccess-Amplify. Please refer to the Amplify IAM Policy documentation for additional information regarding the necessary permissions for Amplify CLI and for more information on providing additional permissions to your Amplify CLI IAM user refer to AWS IAM User documentation.

[ykethan]

Closing the issue due to inactivity. Do reach out to us if you are still experiencing this issue

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.