How does KMS encrypted data behave with S3 Replication?
S3 does not replicate SSE‑KMS or DSSE‑KMS objects unless you explicitly opt in, and when replication occurs the object is decrypted with the source KMS key and re‑encrypted using the destination bucket’s KMS key.
