The service account used for the encryption request for the given KMS key. If absent, the Compute Engine Service Agent service account is used.
Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.