Action: kms:GenerateDataKeyPairWithoutPlaintext

Attached Policies

Policy ARN	Policy Name
`arn:aws:iam::aws:policy/AmazonCognitoUnAuthedIdentitiesSessionPolicy`	AmazonCognitoUnAuthedIdentitiesSessionPolicy