The ARN for the KMS encryption key. When specifying kms_key_id, storage_encrypted needs to be set to true.
kms_key_id
storage_encrypted