Commented out PCR0 check until #5 is done

Cloud-Architects · Dec 15, 2020 · 9199617 · 9199617
1 parent eb46d8c
commit 9199617
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/aws-enclave-setup/src/main/java/solutions/cloudarchitects/awsenclave/setup/OwnerService.java b/aws-enclave-setup/src/main/java/solutions/cloudarchitects/awsenclave/setup/OwnerService.java
@@ -171,12 +171,13 @@ public void addPolicy(String keyId, EnclaveMeasurements enclaveMeasurements, Str
                 "    \"Action\": [" +
                 "      \"kms:Decrypt\"" +
                 "    ]," +
-                "    \"Resource\": \"*\"," +
-                "    \"Condition\": {" +
-                "        \"StringEqualsIgnoreCase\": {" +
-                "          \"kms:RecipientAttestation:ImageSha384\": \"" + enclaveMeasurements.getPcr0() + "\"" +
-                "        }" +
-                "    }" +
+                "    \"Resource\": \"*\"" +
+//                "    \"Resource\": \"*\"," +
+//                "    \"Condition\": {" +
+//                "        \"StringEqualsIgnoreCase\": {" +
+//                "          \"kms:RecipientAttestation:ImageSha384\": \"" + enclaveMeasurements.getPcr0() + "\"" +
+//                "        }" +
+//                "    }" +
                 "}]" +
                 "}";