Key Management Service
A KMS is a managed cloud service for creating, storing, rotating, and controlling access to encryption keys. Instead of applications handling raw key material, they call the KMS to encrypt and decrypt data, and every use is logged. Centralized key management is the backbone of cloud encryption strategy and a common audit focus.