What is AWS KMS?

AWS Key Management Service (KMS) is a managed service that makes it easy to create and control cryptographic keys used to encrypt your data. KMS uses hardware security modules (HSMs) to protect the security of your keys. It integrates with most AWS services to help you protect data stored in those services. KMS allows you to create, rotate, disable, and audit encryption keys used for encrypting data. It provides centralized key management and supports both AWS-managed keys and customer-managed keys for data encryption.