This solutions is to enable domain name file access to a Amazon Simple Storage Service (Amazon S3) bucket with SSE-KMS encryption located in a GovCloud region.

A demo of how to use KMS customer master key (CMK) to encrypt/decrypt S3 data (SSE-KMS)

S3 MFA with CMK

S3 cross-region replication with SSE-KMS

encrypt s3 object using SSE-KMS service