enable aws kms support