Setting awsKmsKeyArn serverless.yml is not encrypting lambda env variables

I am trying to have my env variables encrypted. If I understand the documentation right https://serverless.com/framework/docs/providers/aws/guide/functions#kms-keys. Setting awsKmsKeyArn with KMS key ARN will encrypt the variables…?

Or is it something that we manually have to encrypt…?