Glossary: AWS for Developers
Also written: KMS
The service that keeps encryption keys, and can hold your own when a rule requires it.
Encryption at rest, in transitParameter Store