Resolve the User is not authorized to perform kms:CreateGrant error by updating IAM or KMS key policies to explicitly allow the CreateGrant action.