AWS Key Management Service

AWS Key Management Service (AWS KMS) allows you to create and control keys that protect your data. AWS Control Tower optionally allows you to encrypt your data with AWS KMS encryption keys. For information about AWS KMS, see the AWS KMS Developer Guide.

For information about how to set up AWS KMS keys with AWS Control Tower, see Optionally configure AWS KMS keys.