AddKmsBucketPolicy adds a policy to enable KMS encryption by default on a bucket Inputs: sess is the current session, which provides configuration for the SDK's service clients bucket is the name of the bucket Output: If success, nil Otherwise, an error from the call to json.Marshall or PutBucketPolicy.