Neptune encryption should use Customer Managed Keys
Encryption using AWS keys provides protection for your Neptune underlying storage. To increase control of the encryption and manage factors like rotation use customer managed keys.
Impact
Using AWS managed keys does not allow for fine grained control