The ARN for the KMS encryption key. When specifying kms_key_id, encrypted needs to be set to true.
kms_key_id
encrypted