{
  "resources": {
    "Parameter": {
      "hasResourcePolicy": true,
      "grants": {
        "read": {
          "actions": [
            "ssm:DescribeParameters",
            "ssm:GetParameters",
            "ssm:GetParameter",
            "ssm:GetParameterHistory"
          ],
          "keyActions": ["kms:Decrypt"],
          "docSummary": "The encryption key that is used to encrypt this parameter."
        }
      }
    }
  }
}