How do we encrypt Kinesis data streams and Kinesis firehose


We are currently using CMK key to encrypt all Kinesis data streams in our AWS accounts in multiple regions. The concern is how do we use the same customer managed key(CMK) key to encrypt kinesis firehose data in different regions. Is there a best standard method for doing this? How do we encrypt the kinesis firehose data?