public CreateDBInstanceReadReplicaRequest withKmsKeyId(String kmsKeyId) {
        setKmsKeyId(kmsKeyId);
        return this;
    }
<p>
The Amazon Web Services KMS key identifier for an encrypted read replica.
</p>
<p>
The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.
</p>
<p>
If you create an encrypted read replica in the same Amazon Web Services Region as the source DB instance or
Multi-AZ DB cluster, don't specify a value for this parameter. A read replica in the same Amazon Web Services
Region is always encrypted with the same KMS key as the source DB instance or cluster.
</p>
<p>
If you create an encrypted read replica in a different Amazon Web Services Region, then you must specify a KMS
key identifier for the destination Amazon Web Services Region. KMS keys are specific to the Amazon Web Services
Region that they are created in, and you can't use KMS keys from one Amazon Web Services Region in another Amazon
Web Services Region.
</p>
<p>
You can't create an encrypted read replica from an unencrypted DB instance or Multi-AZ DB cluster.
</p>
<p>
This setting doesn't apply to RDS Custom, which uses the same KMS key as the primary replica.
</p>

@param kmsKeyId
       The Amazon Web Services KMS key identifier for an encrypted read replica.</p>
       <p>
       The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS
       key.
       </p>
       <p>
       If you create an encrypted read replica in the same Amazon Web Services Region as the source DB instance
       or Multi-AZ DB cluster, don't specify a value for this parameter. A read replica in the same Amazon Web
       Services Region is always encrypted with the same KMS key as the source DB instance or cluster.
       </p>
       <p>
       If you create an encrypted read replica in a different Amazon Web Services Region, then you must specify a
       KMS key identifier for the destination Amazon Web Services Region. KMS keys are specific to the Amazon Web
       Services Region that they are created in, and you can't use KMS keys from one Amazon Web Services Region
       in another Amazon Web Services Region.
       </p>
       <p>
       You can't create an encrypted read replica from an unencrypted DB instance or Multi-AZ DB cluster.
       </p>
       <p>
       This setting doesn't apply to RDS Custom, which uses the same KMS key as the primary replica.
@return Returns a reference to this object so that method calls can be chained together.
aws-java-sdk-rds/src/main/java/com/amazonaws/services/rds/model/CreateDBInstanceReadReplicaRequest.java