stats/actions/kms
kms:CancelKeyDeletion;Write
kms:ConnectCustomKeyStore;Write
kms:CreateAlias;Write
kms:CreateCustomKeyStore;Write
kms:CreateGrant;Permissions management
kms:CreateKey;Write
kms:Decrypt;Write
kms:DeleteAlias;Write
kms:DeleteCustomKeyStore;Write
kms:DeleteImportedKeyMaterial;Write
kms:DeriveSharedSecret;Write
kms:DescribeCustomKeyStores;Read
kms:DescribeKey;Read
kms:DisableKey;Write
kms:DisableKeyRotation;Write
kms:DisconnectCustomKeyStore;Write
kms:EnableKey;Write
kms:EnableKeyRotation;Write
kms:Encrypt;Write
kms:GenerateDataKey;Write
kms:GenerateDataKeyPair;Write
kms:GenerateDataKeyPairWithoutPlaintext;Write
kms:GenerateDataKeyWithoutPlaintext;Write
kms:GenerateMac;Write
kms:GenerateRandom;Write
kms:GetKeyPolicy;Read
kms:GetKeyRotationStatus;Read
kms:GetParametersForImport;Read
kms:GetPublicKey;Read
kms:ImportKeyMaterial;Write
kms:ListAliases;List
kms:ListGrants;List
kms:ListKeyPolicies;List
kms:ListKeyRotations;List
kms:ListKeys;List
kms:ListResourceTags;List
kms:ListRetirableGrants;List
kms:PutKeyPolicy;Permissions management
kms:ReEncryptFrom;Write
kms:ReEncryptTo;Write
kms:ReplicateKey;Write
kms:RetireGrant;Permissions management
kms:RevokeGrant;Permissions management
kms:RotateKeyOnDemand;Write
kms:ScheduleKeyDeletion;Write
kms:Sign;Write
kms:SynchronizeMultiRegionKey;Write
kms:TagResource;Tagging
kms:UntagResource;Tagging
kms:UpdateAlias;Write
kms:UpdateCustomKeyStore;Write
kms:UpdateKeyDescription;Write
kms:UpdatePrimaryRegion;Write
kms:Verify;Write
kms:VerifyMac;Write