AWS KMS

AWS Key Management Service (KMS) is designed to make to create and manage cryptographic keys and control their use across a wide range of AWS services and in applications. AWS KMS is presented as a secure and resilient service that uses hardware security modules that have been validated under FIPS 140-2, or are in the process of being validated, to protect keys. AWS KMS is integrated with AWS CloudTrail to provide logs of all key usage to help meet regulatory and compliance needs.