Because no identity-based policy allows the kms:generatedatakey action – Identity-based policies are a powerful tool for controlling access to resources in the cloud. However, there are some limitations to what…