# Create a KMS key for encrypting/decrypting EBS