The ARN of the customer-managed KMS key to use, if you specify SSE_KMS for encryption_mode.
SSE_KMS
encryption_mode