In Aws,need help in implementing a scenario via aws sdk2 Or aws cli.
Scenario: I have s3 bucket with multiple folders and subfolders. Need to apply kms key only over 1st folder level. So that it restrict access to the sub-folder.
Only user who has specific
kmsKey will gain access to that folders and its sub-folder.

Example:

S3 bucket
-folderA (apply kmsKey 1)
-sub-folder1
-sub-folder2
-folderB (apply kmsKey 2)
-sub-folder1
-sub-folder2
-folderC (apply kmsKey 3)
-sub-folder1
-sub-folder2

In above example need to apply kmsKey1,kmsKey2 ,kmskey3 over folderA,folderB,folderC respectively.

I tried implement and apply a single kmsKey at bucket level and restricting access to folder via. IAM policies but that did not meet the business expectations.

I’m expecting to apply kms keys at folder level, so that only user having specific kms key can access that folder.
Any Alternative approach or a suggestions will be appreciated.