KMS-Deny-AWS-Key-Management-Service-asymmetric-key-with-RSA-key-material-used-for-encryption-with-key-length-of-2048-bits.json

{
    "Version":"2012-10-17",
    "Statement":[
       {
          "Effect":"Deny",
          "Principal":"*",
          "Action":"kms:CreateKey",
          "Resource":"*",
          "Condition":{
             "StringEquals":{
                "kms:KeyUsage":"ENCRYPT_DECRYPT",
                "kms:KeySpec":"RSA_2048"
             }
          }
       }
    ]
 }