goofy to use kms vpce endpoint

[shasi24]

Hi, Im trying to use Goofy in an environment with S3 and KMS endpoints, also my role has condition to check if the request made from my specific KMS VPC endpoint.

  "StringEquals": {
	  "aws:SourceVpce": [
		  "vpce-XXXXXXXXXXX" # My kms vpce id
	  ]
  }

I keep getting denied! Only when I remove that condition everything works ok. Any ideas?

thanks