Feature request: Provide configurable KMS Encryption

[kylesomers]

Use case

Provide a configuration option at the resource, and module level that provides a way to easily configure KMS Encryption keys for data at rest instead of the service's default encryption at rest. This provides developers additional control over data at rest encryption.

Solution/User Experience

• Add KMS Encryption parameter to existing modules with resources that support configuration of KMS Encryption Keys. Users can manually configure this value on specific resources as needed. Configure a consistent project level default (true?)
• Create new Terraform module variable that specifies enable/disable of this value for module resources.

Alternative solutions

No response

[henrykie]

Need to identify all existing resources where KMS encryption is used (server-side or otherwise) and provide support for customer managed keys as well.