This is a dedicated watch page for a single video.
A new application requires an AWS KMS key for encrypting sensitive data. The security policy requires that separate keys are used for different AWS services. How can the AWS KMS key be constrained to work with only Amazon S3?