The ARN of the KMS key to use when encryption_type is KMS. If not specified, uses the default AWS managed key for ECR.
encryption_type
KMS