S3：在S3所有操作策略上启用SSE-KMS时，GetObjectRequest无法正常工作

Question

我需要从启用SSE的存储桶中读取数据。 这是给s3桶的政策：

{
   "Version":"2012-10-17",
   "Id":"policy1",
   "Statement":[
      {
         "Sid":"Stmt1559082444183",
         "Effect":"Deny",
         "Principal":{
            "AWS":"*"
         },
         "Action":"s3:*",
         "Resource":"arn:aws:s3:::BUCKET NAME/*",
         "Condition":{
            "Null":{
               "s3:x-amz-server-side-encryption":"true"
            },
            "StringNotEquals":{
               "s3:x-amz-server-side-encryption":"aws:kms",
               "s3:x-amz-server-side-encryption-aws-kms-key-id":"AWS-KMS-KEY-ID"
            }
         }
      }
   ]
}

================读取对象的代码，我试过：

var getObjectRequest : GetObjectRequest = new GetObjectRequest("BUCKET NAME","KEY NAME");
var value = s3Client.getObject(getObjectRequest);

================尝试了这段代码，但没有工作

var sSECustomerKey : SSECustomerKey = new SSECustomerKey("BASE 64 KMS KEY");
sSECustomerKey.setAlgorithm("AWS-KMS") or sSECustomerKey.setAlgorithm("SSE-KMS") 

有人可以帮助我如何在java / scala中实现这一点？