The type of external identifier associated with the encryption key.
The Amazon Resource Name (ARN) of the Amazon Web Services Identity and Access Management (IAM) role that grants access to the KMS key.
The identifier or ARN of the Amazon Web Services KMS key to use for encryption.