The KMS key that is used by Rekognition to encrypt any intermediate customer metadata and store in the customer's S3 bucket.