TS2345: 'trustAccountIdentities' does not exist in type 'KeyProps' error in cdkv2

I upgraded my cdk project from v1 to v2. It's complaining about trustAccountIdentities existance in cdkv2.

error at the time of build:

> error TS2345: Argument of type '{ enableKeyRotation: true; enabled: true; removalPolicy: cdk.RemovalPolicy.DESTROY; trustAccountIdentities: boolean; }' is not assignable to parameter of type 'KeyProps'.
Object literal may only specify known properties, and 'trustAccountIdentities' does not exist in type 'KeyProps'.

It was given same way in cdkv1. My code is as below

    const account = new AccountCustomResource(this, StackConfiguration.name+ '-BucketKmsAccountCustomResource');
     /** Added code to create Custom kms key*/ 
     const MyKmsKey =  new kms.Key(this, (mykey).toLowerCase(), {
      enableKeyRotation: true,
      enabled: true,
      removalPolicy: cdk.RemovalPolicy.DESTROY,
      trustAccountIdentities: true
     });
     MyKmsKey.addAlias(mykey); 

I tried commenting trustAccountIdentities line and build worked fine but then it's giving issue while deployment with below error.

> Stack Deployments Failed: AccessDenied: User: arn:aws:sts::<arn#>:assumed-role/cdk-<some#>-deploy-role-<some#>-<AWS-region>/aws-cdk-bamboo is not authorized to perform: iam:PassRole on resource: arn:aws:iam::<some#>:role/cloud-services/pipeline-elevated-access with an explicit deny in an identity-based policy

The trustAccountIdentities property is deprecated. If you need it treated as true, use the @aws-cdk/aws-kms:defaultKeyPolicies feature flag.

That info is from the KMSProps source code docstrings. It also explains that:

> If the @aws-cdk/aws-kms:defaultKeyPolicies feature flag is set (the default for new projects), this flag will always be treated as 'true' and does not need to be explicitly set.