[keyring] add AWS KMS keyring

[mattsb42-aws]

Add an AWS KMS keyring as defined in the specification: https://github.com/awslabs/aws-encryption-sdk-specification/blob/master/framework/kms-keyring.md