Problem: DR recovery may fail with the error “Given key ID is not accessible”
The following messages may be printed in the CPM Server log:
INFO: recover_volumes_helper(additional_views.py:515) from account: accountA, to account: accountB
ERROR: _check_snap_status(cpm_copy_snapshot.py:570) Volumes Recovery, copy snapshot snap-abcdef1eelkjhgfc9 failed. status error, Error: Given key ID is not accessible
INFO: cpm_copy_snapshot(cpm_copy_snapshot.py:134) Copy snapshot request: from us-east-2 to us-east-2, snap id: snap-aaaaaaaaaaaaaaaaa, kms: arn:aws:kms:us-east-2:1234567890ab:key/760abcde-c123-d123-4567-712345679c63
Cause: This may be caused by user/role permissions policy lacking the required permissions, and/or this user not being granted the required permissions for accountB in the key policy.
Solution: Correct the user/role permissions policy and/or correct the permissions for the account in the key policy.