In aws.base_classes, get_s3_params() and set_s3_params() accept the inputs ["AES256", "aws:kms"].
This should be updated to support aws:kms:dsse. Additionally, they should support the SSEKMSKeyId parameter to support using a non-default (customer-provided) key.