add some more permissions to the root user

hrodmn · hrodmn · commit ab43a324f6fd · 2025-03-04T08:49:44.000-06:00
diff --git a/infra/AuthStack.py b/infra/AuthStack.py
@@ -220,6 +220,9 @@ def _create_policy(self) -> iam.PolicyDocument:
                         "kms:Get*",
                         "kms:List*",
                         "kms:RevokeGrant",
+                        "kms:PutKeyPolicy",
+                        "kms:ScheduleKeyDeletion",
+                        "kms:CancelKeyDeletion",
                     ],
                     effect=iam.Effect.ALLOW,
                     resources=["*"],
