Permissions

The Enforce GCP KMS Crypto Keys Are Not Publicly Accessible policy pack requires 1 permission:

• cloudkms.cryptoKeys.setIamPolicy