Simplify multi-tenant encryption with a cost-conscious AWS KMS key strategy