{"Version": "2012-10-17", "Statement": [{"Sid": "VisualEditor0", "Effect": "Allow", "Action": ["kms:ListKeys", "kms:ListKeyPolicies", "kms:ListRetirableGrants", "kms:ListAliases", "kms:ListResourceTags", "kms:ListGrants"], "Resource": "*", "Condition": {"BoolIfExists": {"aws:MultiFactorAuthPresent": "true"}}}, {"Sid": "VisualEditor1", "Effect": "Allow", "Action": ["kms:GetParametersForImport", "kms:DescribeCustomKeyStores", "kms:GetPublicKey", "kms:GetKeyRotationStatus", "kms:GetKeyPolicy", "kms:DescribeKey"], "Resource": "*", "Condition": {"BoolIfExists": {"aws:MultiFactorAuthPresent": "true"}}}, {"Sid": "VisualEditor2", "Effect": "Allow", "Action": ["secretsmanager:GetResourcePolicy", "secretsmanager:GetSecretValue", "secretsmanager:DescribeSecret", "secretsmanager:ListSecretVersionIds"], "Resource": ["arn:aws:secretsmanager:*:437795906767:secret:qa-automation/*", "arn:aws:secretsmanager:*:437795906767:secret:qa/cypress-configs/*"], "Condition": {"BoolIfExists": {"aws:MultiFactorAuthPresent": "true"}}}, {"Sid": "VisualEditor3", "Effect": "Allow", "Action": ["secretsmanager:GetRandomPassword", "secretsmanager:ListSecrets"], "Resource": "*", "Condition": {"BoolIfExists": {"aws:MultiFactorAuthPresent": "true"}}}]}