aws-kms v5.19.1 - Policy Statements > Approved control will now be skipped for AWS-managed keys