It's hard to find this information on Apple's website. According to https://theintercept.com/2014/09/22/apple-data/

> Apple encrypts your iCloud data in storage, but they encrypt it with their own key, not with your passcode key, which means that they are able to decrypt it to comply with government requests.

Not sure if things have changed since then.