https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html