def validate_encryptionoption(encryption_option):
    """
    Validate EncryptionOption for EncryptionConfiguration
    Property: EncryptionConfiguration.EncryptionOption
    """

    VALID_ENCRYPTIONCONFIGURATION_ENCRYPTIONOPTION = [
        "CSE_KMS",
        "SSE_KMS",
        "SSE_S3",
    ]

    if encryption_option not in VALID_ENCRYPTIONCONFIGURATION_ENCRYPTIONOPTION:
        raise ValueError(
            "EncryptionConfiguration EncryptionOption must be one of: %s"
            % ", ".join(VALID_ENCRYPTIONCONFIGURATION_ENCRYPTIONOPTION)  # NOQA
        )
    return encryption_option