Find KMS Keys With a Wildcard Key Policy Principal or Open Grants

A report-only AWS SDK v3 script that flags KMS key policies with a wildcard principal, other-account principals and grants to other accounts.