This template creates an encrypted read replica from a cross-region source DB instance (SourceDBInstanceIdentifier). The template also creates a KMS key for encryption.

CloudFormation Template