Key Management Service (KMS) is a security management service that uses third-party certified Hardware Security Modules (HSMs) to generate and protect keys. It helps you easily create and manage keys, meeting your key management needs across multiple applications and business scenarios, and complies with regulatory and compliance requirements.
The following figure shows the KMS product architecture: