Query: s3_buckets_for_kms_key

select
  b.arn as bucket_arn
from
  aws_s3_bucket as b
  cross join jsonb_array_elements(server_side_encryption_configuration -> 'Rules') as r
  join aws_kms_key as k on k.arn = r -> 'ApplyServerSideEncryptionByDefault' ->> 'KMSMasterKeyID'
where
  k.arn = $1;