The ARN of the AWS Key Management Service (AWS KMS) customer managed key that's used to encrypt resources.