Key policy without account access

An engineer creates a KMS key with a policy that only allows one IAM role. Later that role is deleted. What is the risk?

{
  "Effect": "Allow",
  "Principal": { "AWS": "arn:aws:iam::111111111111:role/app-role" },
  "Action": "kms:*",
  "Resource": "*"
}