KMS has been integrated with the ActionTrail service. You can view the events performed by all users (including the primary account and RAM users) on your resource instances in ActionTrail.
The KMS information recorded by ActionTrail includes all APIs except DescribeRegions. For more information, see KMS event log examples.
For event details, see ActionTrail event log syntax.