KMS Key arn belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.