The policy [here](https://github.com/terraform-ibm-modules/terraform-ibm-icd-rabbitmq/blob/73ee3dbb7e95ee7642d96e8ee4dcc50aced6f8ad/main.tf#L31-L39) can be updated to scope it to the exact KMS key. For an example of the syntax, see https://github.com/terraform-ibm-modules/terraform-ibm-cos/pull/764