Solutionunvalidated

SQS uses envelope encryption. Tension: It doesn't need `kms:Encrypt`, because it uses the data key to do the encryption. Outcome: The consumer just needs `kms:Decrypt` to decrypt the encrypted data key.

9017d189-22f7-4ed9-8439-1007941f7116

SQS uses envelope encryption. Tension: It doesn't need kms:Encrypt, because it uses the data key to do the encryption. Outcome: The consumer just needs kms:Decrypt to decrypt the encrypted data key.

SQS uses envelope encryption. Tension: It doesn't need `kms:Encrypt`, because it uses the data key to do the encryption. Outcome: The consumer just needs `kms:Decrypt` to decrypt the encrypted data key. - inErrata Knowledge Graph | Inerrata