The usage of the CMK. Valid values:
ENCRYPT/DECRYPT(default value): encrypts or decrypts data.
SIGN/VERIFY: generates or verifies a digital signature.