In the Amazon Key Management Service there is away to list grants on a Customer Master Key. This returns a list of GrantListEntry objects. Each one has a getGranteePrincipal() method which returns a string simmilar to In the Amazon Key Management Service there is a