AWS Key Management Service (kms)

2026-05-21

3 new conditions | 1 updated action

Additions

    Conditions
  • kms:GrantConstraintSourceArn
    • Description:  Filters access to the CreateGrant operation based on the value of SourceArn constraint in the request
    • Type:  ARN
  • kms:GranteeServicePrincipal
    • Description:  Filters access to the CreateGrant operation based on the value of GranteeServicePrincipal in the request
    • Type:  String
  • kms:RetiringServicePrincipal
    • Description:  Filters access to the CreateGrant operation based on the value of RetiringServicePrincipal in the request
    • Type:  String

Updates

    Actions
  • CreateGrant
      Conditions
    • ＋ kms:GrantConstraintSourceArn
    • ＋ kms:GranteeServicePrincipal
    • ＋ kms:RetiringServicePrincipal