AWS Key Management Service (kms)

Additions

Actions

• GetKeyLastUsage
  
  • Description:  Controls permission to view the last usage of an AWS KMS key
  • Access:  Read
  • Resources: 

    Name: key

    Required: Yes

  • Conditions: 

    kms:CallerAccount

    kms:ViaService

Conditions

• kms:TrailingDaysWithoutKeyUsage
  
  • Description:  Filters access to the ScheduleKeyDeletion and DisableKey operations based on the number of days since the AWS KMS key was last used
  • Type:  Numeric

Updates

Actions

• DisableKey
  
  Conditions
  
  • ＋ kms:TrailingDaysWithoutKeyUsage
• Sign
  
  Conditions
  
  • ＋ kms:TrailingDaysWithoutKeyUsage