Forum Discussion
GuardDuty: Demonstrate Your Skills
Has anyone had any issues with the GuardDuty lab. GuardDuty: Demonstrate Your Skills - Labs - Immersive
In task no.4 It asked you: In order to encrypt findings being exported to S3, GuardDuty requires a KMS key
The KMS key policy must give the required permissions to the GuardDuty service principal.
I have amended the policy as followed.
 "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Allow GuardDutytoencryptfindings",
      "Effect": "Allow",
      "Principal": {
        "Service": "guardduty.amazonaws.com"
      },
      "Action": [
        "kms:GenerateDataKey",
      ],
      "Resource": "*"
The lab isn't progressing past this. Am I doing something wrong or is it a bug in the lab.
Any help is appreciated,
Thanks
I
- I have just gone through this lab to see what the problem might be, make sure that you have answered the previous questions for task 4 to get marked as completed. - Looking at your snippet, it looks like you have changed the 'Resource' value that is pre-populated in the KMS key, try without changing this value and only updating the 'Action' value. - The lab is working, no bug, you're not far wrong! 
1 Reply
- LewisMuttonBronze III I have just gone through this lab to see what the problem might be, make sure that you have answered the previous questions for task 4 to get marked as completed. Looking at your snippet, it looks like you have changed the 'Resource' value that is pre-populated in the KMS key, try without changing this value and only updating the 'Action' value. The lab is working, no bug, you're not far wrong!