Encrypt on-premise data using KMS

How to encrypt the data on on-premise using KMS in a secured way? Can we use STS with assume role for this requirement? please let me know the detailed steps.