diff --git a/packages/@aws-cdk/aws-kms/lib/key.ts b/packages/@aws-cdk/aws-kms/lib/key.ts
index 8c565776680df..94c65b5c1ee59 100644
--- a/packages/@aws-cdk/aws-kms/lib/key.ts
+++ b/packages/@aws-cdk/aws-kms/lib/key.ts
@@ -119,7 +119,7 @@ abstract class KeyBase extends Resource implements IKey {
     return { statementAdded: true, policyDependable: this.policy };
   }
 
-  public validate(): string[] {
+  protected validate(): string[] {
     const errors = super.validate();
     errors.push(...this.policy?.validateForResourcePolicy() || []);
     return errors;