Creates an encrypted S3 bucket that is globally accessible.
For now, unfortunately, does not update the files if there is a change to the source. While there is an etag option to s3_bucket_object, it does not currently work with SSE-KMS, which is what we use.