{"Version": "2012-10-17", "Statement": [{"Sid": "", "Effect": "Allow", "Action": ["kms:ReEncrypt*", "kms:GenerateDataKey*", "kms:Encrypt", "kms:DescribeKey", "kms:Decrypt"], "Resource": "arn:aws:kms:us-east-1:437795906767:key/be12bd8d-f0fc-43c2-ab75-a941083fd81d"}]}