The self link of the encryption key that is stored in Google Cloud KMS
The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.