Do i need to create manually AWS kms key for seal “awskms” use?

Question

just to be sure do i need to create manually the AWS kms key to be used in the

seal "awskms" {
        }

configuration?
as i don\