KMS Encrypt Policy Template

[oharaandrew314]

There is a lovely KMSDecryptPolicy SAM policy template, but not one for encryption. Could this be added please?

It would also be nice to see the Encryption Example updated to show how you would use these new policy templates in a way that you no longer need to explicitly create the IAM roles for the functions, and not have to define an explicit policy on the Encryption key.

[brettstack]

Sounds good to me. Think you could send a PR?

[keetonian]

#1192 added this feature