The ARN for the KMS encryption key. If creating an encrypted replica, set this to the destination KMS ARN.