From 5761dfcb60b25a813142e7827379de04371de369 Mon Sep 17 00:00:00 2001
From: Neta Nir <neta@amazon.com>
Date: Wed, 4 Mar 2020 22:52:08 -0800
Subject: [PATCH] fix(cli): codepipeline cloudformation action in cross account
 fail writing outputArtifacts

---
 packages/aws-cdk/lib/api/bootstrap/bootstrap-template.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.json b/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.json
index 1a448254a0cfd..5e523b98a90ca 100644
--- a/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.json
+++ b/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.json
@@ -337,7 +337,8 @@
                     "s3:GetObject*",                    "s3:GetBucket*",
                     "s3:List*",                         "s3:Abort*",
                     "s3:DeleteObject*",                 "s3:PutObject*",
-                    "kms:Decrypt",                      "kms:DescribeKey"
+                    "kms:Decrypt",    "kms:DescribeKey",     "kms:Encrypt",
+                    "kms:ReEncrypt*", "kms:GenerateDataKey*"
                   ],
                   "Resource": "*",
                   "Effect": "Allow"