KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.