Use encryption keys managed by Amazon S3 or customer managed key stored in AWS Key Management Service (AWS KMS) – If you want AWS to manage the keys used to encrypt data, specify the following headers in the request.
https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html