Creates an encrypted S3 bucket that is globally accessible.
For now, unfortunately, does not update the files if there is a change to the source. While there is an etag
option to s3_bucket_object
, it does not currently work with SSE-KMS, which is what we use.