AddKmsEncryption enforces encryption using a KMS key on a bucket Inputs: sess is the current session, which provides configuration for the SDK's service clients bucket is the name of the bucket kmsKeyID is the ID of a KMS key Output: If success, nil Otherwise, an error from the call to PutBucketEncryption.