Whether to enable encryption at rest. Default is false.
false
Amazon Resource Name (ARN) of the encryption key. Required when key_type is CUSTOMER_MANAGED_CMK.
key_type
CUSTOMER_MANAGED_CMK
Type of encryption key. Default is AWS_OWNED_CMK. Valid values are AWS_OWNED_CMK and CUSTOMER_MANAGED_CMK
AWS_OWNED_CMK