KMS-Require-that-an-AWS-KMS-key-is-configured-with-the-bypass-policy-lockout-safety-check-enabled.json

{
    "Version":"2012-10-17",
    "Statement":[
       {
          "Effect":"Deny",
          "Principal":"*",
          "Action":[
             "kms:CreateKey",
             "kms:PutKeyPolicy"
          ],
          "Resource":"*",
          "Condition":{
             "Bool":{
                "kms:BypassPolicyLockoutSafetyCheck":"true"
             }
          }
       }
    ]
 }