stefannegele Fix kms permissions for transformation lambda