I'm trying to either create a Block Storage volume with a customer managed encryption key or assign a customer key to an existing volume.
In both cases I get an error:
could not find kms key or lack of permission
I used both a default domain admin user for this and created a new domain within the compartment along with a new vault and key. I'm using an HSM key but not a private one. I've tried with a software key. I've tried creating new policies including a dynamic group one.
