public String getKMSKeyArn() {
        return this.kMSKeyArn;
    }
<p>
The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's <a
href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption"
>environment variables</a>. When <a
href="https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html">Lambda SnapStart</a> is activated,
Lambda also uses this key is to encrypt your function's snapshot. If you deploy your function using a container
image, Lambda also uses this key to encrypt your function when it's deployed. Note that this is not the same key
that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). If you don't
provide a customer managed key, Lambda uses a default service key.
</p>

@return The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's
        <a href=
        "https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption"
        >environment variables</a>. When <a
        href="https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html">Lambda SnapStart</a> is
        activated, Lambda also uses this key is to encrypt your function's snapshot. If you deploy your function
        using a container image, Lambda also uses this key to encrypt your function when it's deployed. Note that
        this is not the same key that's used to protect your container image in the Amazon Elastic Container
        Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service key.
aws-java-sdk-lambda/src/main/java/com/amazonaws/services/lambda/model/CreateFunctionRequest.java