When creating a file system using the Scalable File Service (SFS), you can select KMS encryption and use the key provided by the KMS to encrypt the file system.For details, see Figure 1. For more information, see the Scalable File Service User Guide.Figure 1 Encrypting Data in SFS 
You can use a custom key created on the KMS console for encryption.