The ARN of the customer-managed KMS key to use, if you specify SSE-KMS for EncryptionMode
SSE-KMS
EncryptionMode