security video for a new application requires an AWS KMS key for encrypting sensitive data. The security policy requires that separate keys are used for
A new application requires an AWS KMS key for encrypting sensitive data. The security policy requires that separate keys are used for different AWS services. How can the AWS KMS key be constrained to work with only Amazon S3?