Store waf logs in KMS encrypted S3

Encryption of logs is best practice. WAF logs can be stored and S3 and this mechanism supports encryption using the Server Side Encryption with AWS Key Management Service (SSE-KMS): https://docs.aws.amazon.com/waf/latest/developerguide/logging-s3.html