{"Version": "2012-10-17", "Statement": [{"Sid": "", "Effect": "Allow", "Action": ["kms:DescribeKey", "kms:Decrypt"], "Resource": "arn:aws:kms:us-east-1:437795906767:key/cd7cd9cb-8631-4c78-8d39-951a23888832"}]}