A managed service for creating and controlling the encryption keys used to protect data in AWS. It integrates with S3, EBS, RDS, Lambda, and more for encryption at rest.
The key management solution on CLF-C02 and SAA-C03. Question: encrypt data in S3 with customer-controlled keys → SSE-KMS with a KMS CMK. Equivalent to Azure Key Vault.
AWS KMS (Key Management Service) is a concept that can show up on the exam. Check the full guide to see it in context.