-record(encryption, {
    encryption_type :: aws@services@s3:server_side_encryption(),
    kms_context :: gleam@option:option(binary()),
    kms_key_id :: gleam@option:option(binary())
}).