Options to control how OpenSearch encrypts buffer data.
The ARN of the KMS key used to encrypt buffer data. By default, data is encrypted using an Amazon Web Services owned key.