The ARN for the KMS encryption key. When specifying kms_key_arn, storage_encrypted needs to be set to true.
kms_key_arn
storage_encrypted