pulumi-aws-kotlin/com.pulumi.aws.kms.kotlin/KeyArgsBuilder/policy

policy

@JvmName(name = "jrsfbndmgmstenmv")

suspend fun policy(value: Output<String>)

@JvmName(name = "fdugjcdrrdymhvuq")

suspend fun policy(value: String?)

Parameters

value

A valid policy JSON document. Although this is a key policy, not an IAM policy, an aws.iam.getPolicyDocument, in the form that designates a principal, can be used.

NOTE: Note: All KMS keys must have a key policy. If a key policy is not specified, AWS gives the KMS key a default key policy that gives all principals in the owning account unlimited access to all KMS operations for the key. This default key policy effectively delegates all access control to IAM policies and KMS grants.