Encrypted Snapshot Recovery from DR account may fail with the “Given key ID is not accessible” error

Encrypted Snapshot Recovery from DR account may fail with the “Given key ID is not accessible” error

Problem: DR recovery may fail with the error “Given key ID is not accessible”

The following messages may be printed in the CPM Server log:
INFO:  recover_volumes_helper(additional_views.py:515)  from account: accountA, to account: accountB
...
ERROR:  _check_snap_status(cpm_copy_snapshot.py:570)  Volumes Recovery, copy snapshot snap-abcdef1eelkjhgfc9 failed. status error,  Error: Given key ID is not accessible
...
INFO:  cpm_copy_snapshot(cpm_copy_snapshot.py:134)  Copy snapshot request: from us-east-2 to us-east-2, snap id: snap-aaaaaaaaaaaaaaaaa, kms: arn:aws:kms:us-east-2:1234567890ab:key/760abcde-c123-d123-4567-712345679c63

Cause: This may be caused by user/role permissions policy lacking the required permissions, and/or this user not being granted the required permissions for accountB in the key policy.

Solution: Correct the user/role permissions policy and/or correct the permissions for the account in the key policy.