https://ones.com/blog/knowledge/mastering-data-encryption-at-rest-aws-best-practices/