Amazon Resource Name (ARN) of the encryption key. Required when key_type is CUSTOMER_MANAGED_CMK.
key_type
CUSTOMER_MANAGED_CMK