public CreateDBClusterRequest withMasterUserSecretKmsKeyId(String masterUserSecretKmsKeyId) {
        setMasterUserSecretKmsKeyId(masterUserSecretKmsKeyId);
        return this;
    }
<p>
The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed in
Amazon Web Services Secrets Manager.
</p>
<p>
This setting is valid only if the master user password is managed by RDS in Amazon Web Services Secrets Manager
for the DB cluster.
</p>
<p>
The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To
use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN.
</p>
<p>
If you don't specify <code>MasterUserSecretKmsKeyId</code>, then the <code>aws/secretsmanager</code> KMS key is
used to encrypt the secret. If the secret is in a different Amazon Web Services account, then you can't use the
<code>aws/secretsmanager</code> KMS key to encrypt the secret, and you must use a customer managed KMS key.
</p>
<p>
There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a different
default KMS key for each Amazon Web Services Region.
</p>
<p>
Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
</p>

@param masterUserSecretKmsKeyId
       The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed
       in Amazon Web Services Secrets Manager.</p>
       <p>
       This setting is valid only if the master user password is managed by RDS in Amazon Web Services Secrets
       Manager for the DB cluster.
       </p>
       <p>
       The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS
       key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN.
       </p>
       <p>
       If you don't specify <code>MasterUserSecretKmsKeyId</code>, then the <code>aws/secretsmanager</code> KMS
       key is used to encrypt the secret. If the secret is in a different Amazon Web Services account, then you
       can't use the <code>aws/secretsmanager</code> KMS key to encrypt the secret, and you must use a customer
       managed KMS key.
       </p>
       <p>
       There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a
       different default KMS key for each Amazon Web Services Region.
       </p>
       <p>
       Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
@return Returns a reference to this object so that method calls can be chained together.
aws-java-sdk-rds/src/main/java/com/amazonaws/services/rds/model/CreateDBClusterRequest.java