The ARN of the KMS key used to encrypt buffer data. By default, data is encrypted using an Amazon Web Services owned key.