What is AWS KMS?

AWS Key Management Service (KMS) lets you create and manage encryption keys to protect your data. It integrates with most AWS services (S3, EBS, RDS) to easily encrypt data at rest. KMS handles key rotation automatically and provides audit trails through CloudTrail. You control who can use keys through IAM policies, ensuring strong data protection with minimal operational overhead.