Encryption using AWS keys provides protection for your DocumentDB underlying storage. To increase control of the encryption and manage factors like rotation use customer managed keys.
Using AWS managed keys does not allow for fine grained control
Enable encryption using customer managed keys
The following example will fail the aws-documentdb-encryption-customer-key check.
The following example will pass the aws-documentdb-encryption-customer-key check.