kms-keys: Skip keys already in pending deletion state (#551)

rebuy-de · Sep 3, 2020 · 0d7db11 · 0d7db11
1 parent bb0ea1d
commit 0d7db11
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/resources/kms-keys.go b/resources/kms-keys.go
@@ -36,17 +36,21 @@ func ListKMSKeys(sess *session.Session) ([]Resource, error) {
 				return false
 			}
 
+			if *resp.KeyMetadata.KeyManager == kms.KeyManagerTypeAws {
+				continue
+			}
+
+			if *resp.KeyMetadata.KeyState == kms.KeyStatePendingDeletion {
+				continue
+			}
+
 			kmsKey := &KMSKey{
 				svc:     svc,
 				id:      *resp.KeyMetadata.KeyId,
 				state:   *resp.KeyMetadata.KeyState,
 				manager: resp.KeyMetadata.KeyManager,
 			}
 
-			if *kmsKey.manager == kms.KeyManagerTypeAws {
-				continue
-			}
-
 			tags, err := svc.ListResourceTags(&kms.ListResourceTagsInput{
 				KeyId: key.KeyId,
 			})