how to download an kms encrypted s3 object

Question

I have created an s3 bucket with no policy and have uploaded a file with kms encryption . I have granted my ec2 instances full s3 access but still I'am not able to download the encrypted file(using aws CLI). it shows the following error: " An error occurred (AccessDenied) when calling the GetObject operation: Access Denied" but I can download non-encrypted files from the same bucket with the same instance without any problem. Where am I gng wrong?

Answer 1

You also need to grant the instance access to the KMS key that was used to encrypt the file.