Bring Your Own Key
BYOK lets customers generate their own encryption keys and import them into a cloud provider's key management service. It gives organizations more control and auditability over the keys protecting their cloud data. The provider still uses the key on your behalf, so it is a middle ground between fully provider-managed keys and keeping keys entirely outside the cloud.