{"Statement": [{"Action": ["kms:ReEncrypt*", "kms:GenerateDataKey*", "kms:Encrypt", "kms:DescribeKey", "kms:Decrypt"], "Effect": "Allow", "Resource": "arn:aws:kms:us-east-1:437795906767:key/820c791c-b3cf-4bdf-858e-407877f454f0", "Sid": ""}, {"Action": "kms:CreateGrant", "Condition": {"Bool": {"kms:GrantIsForAWSResource": "true"}}, "Effect": "Allow", "Resource": "arn:aws:kms:us-east-1:437795906767:key/820c791c-b3cf-4bdf-858e-407877f454f0", "Sid": ""}], "Version": "2012-10-17"}