title: How to get an AWS SSM Key Arn from an Alias using CloudFormation?
body: <p>Is it possible to get a KMS Key ARN using CloudFormation using an alias?
  I want to give specific permissions to a Key in my AWS Account.</p>
  
  <p>Something like the following?</p>
  
  <pre><code>  - Effect: Allow
      Action: kms:Decrypt
      Resource:
        - 'Fn::GetAtt': 
          - 'alias/someAliasOfAKMSKey'
          - 'arn'
  </code></pre>