{"Version": "2012-10-17", "Statement": [{"Sid": "", "Effect": "Allow", "Action": ["kms:ReEncrypt*", "kms:GenerateDataKey*", "kms:Encrypt", "kms:DescribeKey", "kms:Decrypt"], "Resource": "arn:aws:kms:us-east-1:437795906767:key/94b5fce7-b4d8-4ad8-970c-e7b1a02aa538"}]}