AWS Control Tower successfully created Security-OU and a management account. I specified KMS key while creating the landing zone. Where is this AWS key used by control tower? I don't see it being used in Security-OU (audit and log-archive) accounts.
Thanks much for your help.
