Ensure AWS Kinesis streams are encrypted with KMS customer master keys

Use KMS customer-managed keys (CMK ) to protect the Kinesis Streams and metadata. Using KMS CMK, you gain full control over who can use the keys to access AWS Kinesis data (including the system metadata). The AWS KMS service allows you to create, rotate, disable and audit CMK encryption keys