customerEncryptionKeyArn