stats/conditions/kms
kms:BypassPolicyLockoutSafetyCheck
kms:CallerAccount
kms:CustomerMasterKeySpec
kms:CustomerMasterKeyUsage
kms:DataKeyPairSpec
kms:EncryptionAlgorithm
kms:EncryptionContext
kms:EncryptionContextKeys
kms:ExpirationModel
kms:GrantConstraintType
kms:GrantIsForAWSResource
kms:GrantOperations
kms:GranteePrincipal
kms:KeyOrigin
kms:KeySpec
kms:KeyUsage
kms:MacAlgorithm
kms:MessageType
kms:MultiRegion
kms:MultiRegionKeyType
kms:PrimaryRegion
kms:ReEncryptOnSameKey
kms:RecipientAttestation
kms:ReplicaRegion
kms:RequestAlias
kms:RequestTag/${TagKey}
kms:ResourceAliases
kms:ResourceTag/${TagKey}
kms:RetiringPrincipal
kms:RotationPeriodInDays
kms:ScheduleKeyDeletionPendingWindowInDays
kms:SigningAlgorithm
kms:TagKeys
kms:ValidTo
kms:ViaService
kms:WrappingAlgorithm
kms:WrappingKeySpec