For detailed information please see internal TID4273 as this feature request comes from an enterprise customer.

The request is to be able to support AWS's S3 server-side encryption KMS option for full bucket encryption