The key ARN of the customer managed key used for KMS encryption if you use KMS_BASED_ENCRYPTION.
KMS_BASED_ENCRYPTION