https://misskecupbung.wordpress.com/2022/02/23/aws-how-to-encrypt-s3-objects-using-sse-kms/