anchor.diff:      --name GREETING \
       --value Hello \
       --type SecureString \
  -    --key-id arn:aws:kms:us-east-1:091144949931:key/414a963b-7fe4-4a61-b19f-ea408b9bda3b
  +    --key-id arn:aws:kms:us-east-1:123456789012:key/414a963b-7fe4-4a61-b19f-ea408b9bda3b
     {
         "Version": 1
     }
  
positive.code: . Click on `Finish`.
  . Select `IAM`, `Encryption Keys`, `k8s-key` and copy the ARN of the key.
  
  === Create secrets
  
  Only the value of the secure string parameter is encrypted. The name of the parameter, description, and other properties are not encrypted.
  
negative.code:         "Effect": "Allow",
          "Principal": {
            "AWS": [
              "arn:aws:iam::123456789012:role/nodes.example.cluster.k8s.local"
            ]
          },
          "Action": [
  