This fork is deprecated. It will go away once our wrappers use an updated cloudposse terraform-aws-eks-cluster module that has kms envelop encryption support. - View it on GitHub