How to encrypt lambda environment with KMS

Hi team,

Could you please assist me with how we can encrypt the Lambda environment variable by using AWS KMS kay?
Below is TF code.

resource “aws_lambda_function” “lambdaname” {
filename = “tf_node.zip”
memory_size = “1500”
timeout = “360”
function_name = “${terraform.workspace}-lambdaname”
role = aws_iam_role.iam_role_lambda_lamdaname_execution.arn
handler = “instana-aws-lambda-auto-wrap.handler”
runtime = “nodejs12.x”
kms_key_arn = “arn:aws:kms:ap-south-1:XXXXXXXXX:key/0000000-bfc2-4d1c-b806-XXXXX”

environment {
variables = {

“DB_HOST” = “XXXXXX-south-1.rds.amazonaws.com
“DB_PORT” = “5432”
“DB_USER” = “userame”
“DATABASE” = “dbname”
“DB_PASSWORD” = “secretPsswd”

}
}
###############
to encrypt the above variable value with KMS kay what is the TF code/syntax needs to be added to terraform file.

I am stuck here. Please help me out

Thanks
Dinesh Kumar