From 20289cea520d10f5a6d22226a10262c981f1de3d Mon Sep 17 00:00:00 2001
From: Brian Menges <bmenges@onemedical.com>
Date: Mon, 18 Nov 2024 10:04:31 -0800
Subject: [PATCH] INFRA-5855 add missing kms:Decrypt permission to lambda role

---
 anti-virus-scan.tf | 1 +
 version            | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/anti-virus-scan.tf b/anti-virus-scan.tf
index 8896db8..a862a72 100644
--- a/anti-virus-scan.tf
+++ b/anti-virus-scan.tf
@@ -88,6 +88,7 @@ data "aws_iam_policy_document" "main_scan" {
 
       actions = [
         "kms:GenerateDataKey",
+        "kms:Decrypt"
       ]
 
       resources = [
diff --git a/version b/version
index 94dfee4..1e96c27 100644
--- a/version
+++ b/version
@@ -1,3 +1,3 @@
 # Incrementing the version number below will trigger a
 # release tag with that version to be created automatically.
-3.0.2
+3.0.3