Amazon_S3_29
This rule identifies all the AWS instances outside of the following regions: Frankfurt, Ireland, London, Paris
7. Under Key Administrators section, select which IAM users and/or roles can administer the CMK, then click Next Step.