encryptionKeyArn

Customer-managed KMS key. Defaults to AWS-owned key. Not updatable after creation.