kms:ListRetirableGrants is a List access-level action in the kms service. Controls permission to view grants in which the specified principal is the retiring principal. Other principals might be able to retire the grant and this principal might be able to retire other grants
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows kms:ListRetirableGrants. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowKmsListRetirableGrants",
"Effect": "Allow",
"Action": "kms:ListRetirableGrants",
"Resource": "*"
}
]
}