Which of the following statements about key policies in AWS Key Management Service is true?

Select one answer

Both an IAM identity$-$based policy in the AWS account that wants to access the KMS key and a resource$-$based key policy in the AWS account where the KMS key resides are required to access and use a KMS key from a different AWS account.

Only an IAM identity$-$based policy in the AWS account that wants to access the KMS key is required to access and use a KMS key from a different AWS account.

Only a resource$-$based key policy in the AWS account where the KMS key resides is required to access and use a KMS key from a different AWS account.

Neither an IAM identity$-$based policy nor a resource$-$based key policy are required to access and use a KMS key from a different AWS account.

$$

$$ Review later