This Gist shows how you can encrypt/decrypt variables with KMS during your Ansible playbook execution. While google searching I couldn't find anything useful on the subject.
Let's say your project has a folder of playbooks called plays.
In that folder, create a folder called filter_plugins and insert kms_filters.py (included in this gist)