aws kms create-grant
Adds a grant to a KMS key. AWS CLI reference
10 options Its page in the AWS CLI reference
Options
--constraintsSpecifies a grant constraint.--dry-runChecks if your request will succeed.--grant-tokensA list of grant tokens.--grantee-principalThe identity that gets the permissions specified in the grant.--grantee-service-principalThe Amazon Web Services service principal that gets the permissions specified in the grant.--key-idIdentifies the KMS key for the grant.--nameA friendly name for the grant.--operationsA list of operations that the grant permits.--retiring-principalThe principal that has permission to use the RetireGrant operation to retire the grant.--retiring-service-principalThe Amazon Web Services service principal that has permission to use the RetireGrant operation to retire the grant.