CMK

A CMK is an encryption key that the customer creates and controls within a cloud key management service, as opposed to default keys the provider manages invisibly. The customer sets the key policy, controls rotation, and can revoke access, which effectively renders the encrypted data unreadable. Compliance frameworks often require customer-managed keys for sensitive data.