AWS Key Management Service Allows us to create and manage encryption key. Integrates with AWS CloudTrail to log all key usuage.