kms:

kms:Decrypt

         "kms:ReplicateKey",
         "kms:Create*",
         "kms:Describe*",
         "kms:Enable*",
         "kms:List*",
         "kms:Put*",
         "kms:Update*",
         "kms:Revoke*",
         "kms:Disable*",
         "kms:Get*",
         "kms:Delete*",
         "kms:ScheduleKeyDeletion",
         "kms:CancelKeyDeletion"
       

See also

• Terraform resource: aws_kms_key, kms:
• AWS KMS, Terraform KMS, kms:, create_kms_key