The following description might change depending on the direction we choose in the EP.

There are two options here for the TP implementation:

• 1. Create an interface to configure AWS kms specifically
• 2. Rely on the generic APIServer encryption config to connect the kube-apiserver to the KMS plugin and then let users configure the plugin themselves without using an interface that we own.