Using only key policies to control access

When I created the key policy earlier in this chapter during one of the demonstrations, I was given the option to select any IAM users or roles that could act as administrators of the CMK. I selected the users Cloudacademy and Stuart, as seen here:

This resulted in an entry in the key policy as follows:

{
            "Sid": "Allow access for Key Administrators",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::730739171055:user/Cloudacademy",
                    "arn:aws:iam::730739171055:user/Stuart"
                ]
            },
            "Action": [
                "kms:Create*",
                "kms:Describe*",
                "kms:Enable*",
                "kms:List*",
                "kms:Put*",
                "kms:Update*",
      ...