The documentation for TransformOutput states that if KmsKeyId isn't specified, that the default encryption for the configured role is used for encrypting data output.
Indeed, when I exclude that configuration item, it ends up encrypted. Is there a way to disable encrypted output in Sagemaker? I can currently just do a copy_object from the output keys to themselves using boto3 but it would be nice to skip this step.