{
    "Version": "2012-10-17",
    "Id": "key-consolepolicy-3",
    "Statement": [
        {
            "Sid": "Enable IAM User Permissions",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::925511037392:root"
            },
            "Action": "kms:*",
            "Resource": "*"
        },
        {
            "Sid": "Allow access for Key Administrators",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::925511037392:user/daniel@naturalint.com",
                    "AIDAIVA3UXATCEV3JOVNK"
                ]
            },
            "Action": [
                "kms:Create*",
                "kms:Describe*",
                "kms:Enable*",
                "kms:List*",
                "kms:Put*",
                "kms:Update*",
                "kms:Revoke*",
                "kms:Disable*",
                "kms:Get*",
                "kms:Delete*",
                "kms:TagResource",
                "kms:UntagResource",
                "kms:ScheduleKeyDeletion",
                "kms:CancelKeyDeletion"
            ],
            "Resource": "*"
        },
        {
            "Sid": "Allow use of the key",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::925511037392:user/alexander.ivanov@naturalint.com",
                    "arn:aws:iam::925511037392:user/resovler-service",
                    "arn:aws:iam::925511037392:user/Tomer.volovic@naturalint.com",
                    "arn:aws:iam::925511037392:user/hila.eretzkdosha@naturalint.com",
                    "arn:aws:iam::925511037392:user/kms_user_production",
                    "arn:aws:iam::925511037392:user/imri.barr@naturalint.com",
                    "arn:aws:iam::925511037392:user/jonathan.assif@naturalint.com",
                    "arn:aws:iam::925511037392:user/andrii.bakhtiozin@naturalint.com",
                    "arn:aws:iam::925511037392:user/omri.walton@naturalint.com",
                    "arn:aws:iam::925511037392:user/sergey.desyatkov@naturalint.com",
                    "arn:aws:iam::925511037392:user/nofar.schenker@naturalint.com",
                    "arn:aws:iam::925511037392:user/yariv.lukach@naturalint.com",
                    "arn:aws:iam::925511037392:user/tom.agami@naturalint.com",
                    "arn:aws:iam::925511037392:user/idan.brand@naturalint.com",
                    "arn:aws:iam::925511037392:user/Ilan.Baskin@naturalint.com",
                    "arn:aws:iam::925511037392:user/reut.yaniv@naturalint.com",
                    "arn:aws:iam::925511037392:user/lital.friedman@naturalint.com",
                    "arn:aws:iam::925511037392:user/data-lake-production-ca",
                    "arn:aws:iam::925511037392:user/golan.avidan@naturalint.com",
                    "arn:aws:iam::925511037392:user/nifi-automation",
                    "arn:aws:iam::925511037392:user/conversions-qa-bucket-credentials",
                    "arn:aws:iam::925511037392:user/tomer.belo@naturalint.com",
                    "arn:aws:iam::925511037392:user/nir.krumer@naturalint.com",
                    "arn:aws:iam::925511037392:user/tomer.yemini@naturalint.com",
                    "arn:aws:iam::925511037392:user/natalie.zeller@naturalint.com",
                    "arn:aws:iam::925511037392:user/roei.kahny@naturalint.com",
                    "arn:aws:iam::925511037392:user/ofir.axebrad@naturalint.com",
                    "arn:aws:iam::925511037392:user/yehonatanp@naturalint.com",
                    "arn:aws:iam::925511037392:user/talia.ran@naturalint.com",
                    "arn:aws:iam::925511037392:user/itay.abramovich@naturalint.com",
                    "arn:aws:iam::925511037392:user/jason.dietz@naturalint.com",
                    "arn:aws:iam::925511037392:user/moshe.peretz@naturalint.com",
                    "arn:aws:iam::925511037392:user/lihi.jarus@naturalint.com",
                    "arn:aws:iam::925511037392:user/yaniv.orkabi@naturalint.com",
                    "arn:aws:iam::925511037392:user/dmitriy.mikula@naturalint.com",
                    "arn:aws:iam::925511037392:user/daryl.rankoff@naturalint.com",
                    "arn:aws:iam::925511037392:user/ofir.israel@naturalint.com",
                    "arn:aws:iam::925511037392:user/shir.matishevski",
                    "arn:aws:iam::925511037392:user/roei.hamani@naturalint.com",
                    "arn:aws:iam::925511037392:user/clara.guez@naturalint.com",
                    "arn:aws:iam::925511037392:user/Sivan.abramovich@naturalint.com",
                    "AIDAJZY7FQF7SBVDYNSRI",
                    "arn:aws:iam::925511037392:user/shani.makover@naturalint.com"
                ]
            },
            "Action": [
                "kms:Encrypt",
                "kms:Decrypt",
                "kms:ReEncrypt*",
                "kms:GenerateDataKey*",
                "kms:DescribeKey"
            ],
            "Resource": "*"
        },
        {
            "Sid": "Allow attachment of persistent resources",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::925511037392:user/alexander.ivanov@naturalint.com",
                    "arn:aws:iam::925511037392:user/resovler-service",
                    "arn:aws:iam::925511037392:user/Tomer.volovic@naturalint.com",
                    "arn:aws:iam::925511037392:user/hila.eretzkdosha@naturalint.com",
                    "arn:aws:iam::925511037392:user/kms_user_production",
                    "arn:aws:iam::925511037392:user/imri.barr@naturalint.com",
                    "arn:aws:iam::925511037392:user/jonathan.assif@naturalint.com",
                    "arn:aws:iam::925511037392:user/andrii.bakhtiozin@naturalint.com",
                    "arn:aws:iam::925511037392:user/omri.walton@naturalint.com",
                    "arn:aws:iam::925511037392:user/sergey.desyatkov@naturalint.com",
                    "arn:aws:iam::925511037392:user/nofar.schenker@naturalint.com",
                    "arn:aws:iam::925511037392:user/yariv.lukach@naturalint.com",
                    "arn:aws:iam::925511037392:user/tom.agami@naturalint.com",
                    "arn:aws:iam::925511037392:user/idan.brand@naturalint.com",
                    "arn:aws:iam::925511037392:user/Ilan.Baskin@naturalint.com",
                    "arn:aws:iam::925511037392:user/reut.yaniv@naturalint.com",
                    "arn:aws:iam::925511037392:user/lital.friedman@naturalint.com",
                    "arn:aws:iam::925511037392:user/data-lake-production-ca",
                    "arn:aws:iam::925511037392:user/golan.avidan@naturalint.com",
                    "arn:aws:iam::925511037392:user/nifi-automation",
                    "arn:aws:iam::925511037392:user/conversions-qa-bucket-credentials",
                    "arn:aws:iam::925511037392:user/tomer.belo@naturalint.com",
                    "arn:aws:iam::925511037392:user/nir.krumer@naturalint.com",
                    "arn:aws:iam::925511037392:user/tomer.yemini@naturalint.com",
                    "arn:aws:iam::925511037392:user/natalie.zeller@naturalint.com",
                    "arn:aws:iam::925511037392:user/roei.kahny@naturalint.com",
                    "arn:aws:iam::925511037392:user/ofir.axebrad@naturalint.com",
                    "arn:aws:iam::925511037392:user/yehonatanp@naturalint.com",
                    "arn:aws:iam::925511037392:user/talia.ran@naturalint.com",
                    "arn:aws:iam::925511037392:user/itay.abramovich@naturalint.com",
                    "arn:aws:iam::925511037392:user/jason.dietz@naturalint.com",
                    "arn:aws:iam::925511037392:user/moshe.peretz@naturalint.com",
                    "arn:aws:iam::925511037392:user/lihi.jarus@naturalint.com",
                    "arn:aws:iam::925511037392:user/yaniv.orkabi@naturalint.com",
                    "arn:aws:iam::925511037392:user/dmitriy.mikula@naturalint.com",
                    "arn:aws:iam::925511037392:user/daryl.rankoff@naturalint.com",
                    "arn:aws:iam::925511037392:user/ofir.israel@naturalint.com",
                    "arn:aws:iam::925511037392:user/shir.matishevski",
                    "arn:aws:iam::925511037392:user/roei.hamani@naturalint.com",
                    "arn:aws:iam::925511037392:user/clara.guez@naturalint.com",
                    "arn:aws:iam::925511037392:user/Sivan.abramovich@naturalint.com",
                    "AIDAJZY7FQF7SBVDYNSRI",
                    "arn:aws:iam::925511037392:user/shani.makover@naturalint.com"
                ]
            },
            "Action": [
                "kms:CreateGrant",
                "kms:ListGrants",
                "kms:RevokeGrant"
            ],
            "Resource": "*",
            "Condition": {
                "Bool": {
                    "kms:GrantIsForAWSResource": "true"
                }
            }
        }
    ]
}