Help with Zero Knowledge (ZKA) and cloud databases

I want to create an app that uses AWS dynamo to store data. However, I do not trust the cloud (AWS offer encryption which I would also use). Is the best way to get around this issue to encrypt/decrypt the data client side. If so what is the best way to do this, I always hear that it's better not to handle encryption yourself due to naive mistakes etc.

HN seemed like the best place for this might be wrong.

Any