The resource-based policy would grant public access to the key.
Modify the policy to restrict access to specific principals and resubmit the request.