Right now S3 bucket encryption with KMS is limited to using the default key. Can the option for specifying a KMS key be exposed?
I believe this would require adding an option to specify s3manager.UploadInput.SSEKMSKeyId and making it available for configuration.