# Provider
<a name="API_Provider"></a>

Identifies the Amazon Key Management Service (Amazon KMS) key used to encrypt the secrets.

## Contents
<a name="API_Provider_Contents"></a>

 ** keyArn **   <a name="AmazonEKS-Type-Provider-keyArn"></a>
Amazon Resource Name (ARN) or alias of the KMS key. The KMS key must be symmetric and created in the same Amazon Web Services Region as the cluster. If the KMS key was created in a different account, the [IAM principal](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) must have access to the KMS key. For more information, see [Allowing users in other accounts to use a KMS key](https://docs.amazonaws.cn/kms/latest/developerguide/key-policy-modifying-external-accounts.html) in the * Amazon Key Management Service Developer Guide*.  
Type: String  
Required: No

## See Also
<a name="API_Provider_SeeAlso"></a>

For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/eks-2017-11-01/Provider) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/eks-2017-11-01/Provider) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/eks-2017-11-01/Provider)