Query: kms_keys_for_backup_vault

select
  encryption_key_arn as kms_key_arn
from
  aws_backup_vault
where
  encryption_key_arn is not null
  and arn = $1;