https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html
aws kms
create-key | enable-key | list-keys | decrypt | encrypt | schedule-key-deletion | verify
gcloud kms
Advertising: