provide kms key to encrypt s3 bucket for logs

[david-saeger]

Is your feature request related to a problem? Please describe.
This module creates a bucket without the option to provide a kms key to encrypt objects. This produces a finding in AWS Config "Checks if the S3 buckets are encrypted with AWS Key Management Service (AWS KMS). The rule is NON_COMPLIANT if the S3 bucket is not encrypted with an AWS KMS key."

Describe the solution you'd like
Id like for a kms key to be an input to this module which would be used instead of default encryption
Describe alternatives you've considered
I have explored no alternatives
Additional context
Add any other context or screenshots about the feature request here.