kmsKeyId

The ID of the Amazon Web Services KMS key to use to encrypt the data exported to Amazon S3. The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. The caller of this operation must be authorized to run the following operations. These can be set in the Amazon Web Services KMS key policy:

• kms:Encrypt

• kms:Decrypt

• kms:GenerateDataKey

• kms:GenerateDataKeyWithoutPlaintext

• kms:ReEncryptFrom

• kms:ReEncryptTo

• kms:CreateGrant

• kms:DescribeKey

• kms:RetireGrant