public void setKmsKeyId(String kmsKeyId) {
        this.kmsKeyId = kmsKeyId;
    }
<p>
The Amazon Web Services KMS key identifier for an encrypted DB cluster.
</p>
<p>
The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To
use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN.
</p>
<p>
When a KMS key isn't specified in <code>KmsKeyId</code>:
</p>
<ul>
<li>
<p>
If <code>ReplicationSourceIdentifier</code> identifies an encrypted source, then Amazon RDS uses the KMS key used
to encrypt the source. Otherwise, Amazon RDS uses your default KMS key.
</p>
</li>
<li>
<p>
If the <code>StorageEncrypted</code> parameter is enabled and <code>ReplicationSourceIdentifier</code> isn't
specified, then Amazon RDS uses your default KMS key.
</p>
</li>
</ul>
<p>
There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a different
default KMS key for each Amazon Web Services Region.
</p>
<p>
If you create a read replica of an encrypted DB cluster in another Amazon Web Services Region, make sure to set
<code>KmsKeyId</code> to a KMS key identifier that is valid in the destination Amazon Web Services Region. This
KMS key is used to encrypt the read replica in that Amazon Web Services Region.
</p>
<p>
Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
</p>

@param kmsKeyId
       The Amazon Web Services KMS key identifier for an encrypted DB cluster.</p>
       <p>
       The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS
       key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN.
       </p>
       <p>
       When a KMS key isn't specified in <code>KmsKeyId</code>:
       </p>
       <ul>
       <li>
       <p>
       If <code>ReplicationSourceIdentifier</code> identifies an encrypted source, then Amazon RDS uses the KMS
       key used to encrypt the source. Otherwise, Amazon RDS uses your default KMS key.
       </p>
       </li>
       <li>
       <p>
       If the <code>StorageEncrypted</code> parameter is enabled and <code>ReplicationSourceIdentifier</code>
       isn't specified, then Amazon RDS uses your default KMS key.
       </p>
       </li>
       </ul>
       <p>
       There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a
       different default KMS key for each Amazon Web Services Region.
       </p>
       <p>
       If you create a read replica of an encrypted DB cluster in another Amazon Web Services Region, make sure
       to set <code>KmsKeyId</code> to a KMS key identifier that is valid in the destination Amazon Web Services
       Region. This KMS key is used to encrypt the read replica in that Amazon Web Services Region.
       </p>
       <p>
       Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
aws-java-sdk-rds/src/main/java/com/amazonaws/services/rds/model/CreateDBClusterRequest.java