IAM policy for Google Cloud KMS crypto key

KMSのencryptor decryptorをいい感じに設定するためのIAMポリシーのところ

registry.terraform.io

$ terraform import google_kms_crypto_key_iam_binding.crypto_key "your-project-id/location-name/key-ring-name/key-name roles/editor"