https://orbitbrain.com/blog/aws-enables-default-server-side-encryption-for-s3-objects/