Key policies define which identities—administrators, users, and cross-account users—can access a key in a KMS instance. Use this procedure to view the policy attached to a key.
Key policies are supported only for keys in KMS instances. You can configure a key policy when you create a key, or modify the key policy after the key is created. To set or update a key policy, see Manage a key and Configure a key policy.
View a key policy in the KMS console
Log on to the KMS console. In the top navigation bar, select a region. In the left-side navigation pane, click Keys.
On the Keys tab, find the key whose policy you want to view. Click the key ID, or click Details in the Actions column.
On the details page, click the Key Policy tab.
Review the policy using one of the following display modes:
Display by Graphic: Shows the administrators, users, and cross-account users configured in the policy.
ImportantIf the policy contains custom policy content, that content is visible only in Display by Syntax mode. It does not appear in the graphic view.
Display by Syntax: Shows the full policy in syntax format. For details about policy statement fields, see Overview of key policies.
What's next
To update the key policy, see Configure a key policy.