Working with Customer Master Keys (CMKs) using the AWS KMS API