Ensure that AWS Proton environment template is encrypted with desired level.
AWS Proton encrypts sensitive data in your template bundles at rest in the S3 bucket where you store your template bundles using AWS-managed keys. Use customer-managed keys (CMKs) in order to meet regulatory compliance requirements within your organization.
Create Proton environment template with customer-manager keys (CMKs)