what

• Add enabled flag
• Add policy support

why

• Se enabled flag to false to prevent the module from creating any resources
• aws_kms_key supports policy attribute