For more details on creating grants from the CLI, you can refer to https://docs.aws.amazon.com/cli/latest/reference/kms/create-grant.html.