Can't decrypt noncurrent versions of files using EncryptionV2 with kms(short issue description)

[alextwoods]

Describe the bug

see: #2865

When attempting to decrypt a noncurrent version of an object using the S3 Encryption client, it fails with a OpenSSL::Cipher::CipherError.

Expected Behavior

Decryption of non-current versions should succeed.

Current Behavior

fails with a OpenSSL::Cipher::CipherError

Reproduction Steps

client = Aws::S3::EncryptionV2::Client.new(
  kms_key_id: ENV.fetch('KMS_KEY_ID'),
  key_wrap_schema: :kms_context,
  content_encryption_schema: :aes_gcm_no_padding,
  security_profile: :v2
)

client.put_object(
  bucket: ENV.fetch('S3_BUCKET_NAME'),
  key: 'foo',
  body: 'bar'
)

Decrypt (must be a non-current version_id)

obj = client.get_object(
  bucket: ENV.fetch('S3_BUCKET_NAME'),
  key: 'foo',
  version_id: version_id
)

Possible Solution

No response

Additional Information/Context

No response

Gem name ('aws-sdk', 'aws-sdk-resources' or service gems like 'aws-sdk-s3') and its version

aws-sdk-s3 (current)

Environment details (Version of Ruby, OS environment)

Ruby 2.7

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.