Amazon Key Management Service (KMS) is a web service that enables organizations to create and manage cryptographic keys used throughout the AWS platform. KMS allows users to centrally manage encryption and decryption keys, provides high availability for these cryptographic secrets, as well as control their use across a broad range of AWS services and custom applications. KMS also allows customers to audit usage of keys, and ensure keys are regularly rotated to meet security and compliance requirements.