A. Attach the kms:decrypt permission to the Lambda function’s resource policy.
B. Grant the decrypt permission for the Lambda IAM role in the KMS key’s policy. Most Voted
C. Grant the decrypt permission for the Lambda resource policy in the KMS key’s policy.
D. Create a new IAM policy with the kms:decrypt permission and attach the policy to the Lambda function.
E. Create a new IAM role with the kms:decrypt permission and attach the execution role to the Lambda function. Most Voted