If KeyType is CUSTOMER_MANAGED_CMK, this field contains the ARN of the customer managed CMK. If KeyType is Amazon Web Services_OWNED_CMK, DeliveryStreamEncryptionConfiguration doesn't contain a value for KeyARN.
KeyType
CUSTOMER_MANAGED_CMK
Amazon Web Services_OWNED_CMK
DeliveryStreamEncryptionConfiguration
KeyARN