The ARN, key ID, or alias of the KMS key to encrypt the secret. If you don't include this field, Secrets Manager uses aws/secretsmanager.
aws/secretsmanager
A Region code. For a list of Region codes, see Name and code of Regions.