Issues using the KMS Master Key module, "The new key policy will not allow you to update the key policy in the future."

[rsmets]

Upon trying to use the KMS master key module I met with the following error:

Error: creating KMS Key: MalformedPolicyDocumentException: The new key policy will not allow you to update the key policy in the future.

I have ensured that I have filled out the cmk_administrator_iam_arns and cmk_user_iam_arns appropriately. Curious if anyone else has run into this what the fix was. Thank you.

r:terraform-aws-security

---

Tracked in ticket #110098

[rsmets]

Ahh turns out I thought I had included a necessary cmk_administrator_iam_arns when in fact I missed one.