An example that controls IAM users who can access KMS key with the IAM group - View it on GitHub