Minimizing key access

Review key-access minimization.

Key policy

A resource policy that controls which principals may use or manage a cryptographic key.

Decrypt permission

An authorization allowing ciphertext to be converted back into plaintext.

Deny event

A recorded operation rejected by an identity, resource, or key policy.

Key condition

A policy constraint based on context such as resource, action, principal, or network.