module "cloudwatch-kms-key" {