Tools/AWS_KMS
AWS KMS (Key Management Service)
Managed cryptographic key creation and control for encryption at rest — AWS-managed keys or Customer Managed Keys (CMK) for granular access control. Most-used open-source equivalent is HashiCorp Vault — encryption-as-a-service and key lifecycle management with fine-grained access policies; for hardware-backed key storage, pair with SoftHSM (dev/test) or dedicated HSM hardware, since Vault alone doesn't provide hardware-level guarantees.