How to serve content encrypted with SSE-KMS from S3 using CloudFront

This HTML was served from an S3 bucket with SSE-KMS encryption enabled.