kms: Add support for KEY_AGREEMENT to KeyUsage in KMS key

[lohn]

Describe the feature

Add support for KEY_AGREEMENT to KeyUsage when creating KMS keys.

Use Case

To create KMS keys for shared secret derivation using CDK, enabling the use of the new DeriveSharedSecret API.

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.150.0

Environment details (OS name and version, etc.)

macOS Sonoma 14.5

[khushail]

Hi @lohn , thanks for requesting this. I see this is supported by Cloudformation - https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html#cfn-kms-key-keyusage, so CDK is good to provide support for the requested feature-

aws-cdk/packages/aws-cdk-lib/aws-kms/lib/key.ts

Line 392 in 3f93027

export enum KeyUsage {

Marking this as P3 for the contribution from the community.