Review our KMS reference implementation to make sure we follow key best practices

[diego-ojeda-binbash]

Describe the Feature

Review our KMS reference implementation to make sure we follow key best practices such as the following:

• When the principal in a key policy statement is an AWS service principal, we strongly recommend that you use the aws:SourceArn or aws:SourceAccount global condition keys, in addition to the kms:EncryptionContext:context-key condition key. => https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-services.html
• https://docs.aws.amazon.com/kms/latest/developerguide/best-practices.html
• https://docs.aws.amazon.com/prescriptive-guidance/latest/encryption-best-practices/kms.html
• https://www.linkedin.com/pulse/securing-cloud-aws-kms-best-practices-jennifer-grey-gqogf/